Refresh of Shibboleth IdP logout page returns you to SP and gives error.

[Cantor, Scott]

On 11/21/13, 6:31 PM, "Lipscomb, Gary" <glipscomb at csu.edu.au> wrote:

> 
>I the user refreshes the screen at this point  the get redirected back to
>the SP they just logged out of and get the following error message[1].
>Message is expected since they have had their shibboleth session killed.

You didn't configure message signing, I suspect.

>Is it possible to stop this redirect back?

Stopping a redirect back doesn't make a logout request that's broken work
correctly.

I don't know what it does if the asynchronous flag is set but the request
is invalid.

-- Scott