LogoutRequest not fulfilled by IdP

[vyal2k]

I will go with your suggestion and will use transient NameId. 
But how can i get Logout Request to work/process successfully with transient NameId as the user is logging in using LDAP common name and the IdP is not able to locate the session with transient NameId?
 
Thanks,
Vasu

________________________________
 From: "Cantor, Scott" <cantor.2 at osu.edu>
To: Shib Users <users at shibboleth.net> 
Sent: Tuesday, 26 November 2013 11:01 PM
Subject: Re: LogoutRequest not fulfilled by IdP
 

On 11/26/13, 12:18 PM, "vyal2k" <vyal2k at yahoo.com> wrote:

>How can i request IdP to return LDAP common name (which is what the user
>enters in login page) in the Assertion upon successful authentication so
>that i can use the same in Logout Request.

You don't need to, that will waste hours of your time. Just use transients
and leave the defaults alone.

>Also what should be the NameId Format for LDAP common name?

There's a probably a Format for DNs, I don't remember offhand. LDAP common
names have no structure so there is certainly no format for that.


-- Scott


--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131126/022cd86c/attachment.html