IDP Logout, text asking user whether or not to kill the IDP session

[Cantor, Scott]

On 10/16/13 1:12 PM, "Steven Carmody" <steven_carmody at brown.edu> wrote:
>
>And a Shibboleth question for the list -- I believe the Logout endpoint
>in the Shib SP can be passed a url; after killing the local SP session
>it will redirect the browser to that url. Typically, that URL would be
>the Logout endpoint of the IDP that was used ....

If you do the proprietary thing, yes. The SAML logout case just goes to
the endpoint in the metadata.

>If that endpoint wanted to display a page saying something like "You
>have logged out of xxxxxx.  You are still logged in to weblogin as yyy."
>
>would it automatically be receiving anything from the SP to help it fill
>in the XXX's and YYY's in that page ?

It doesn't receive anything but what you put in the URL.

>The IDP endpoint could only obtain a displayable name for the user by
>looking into information maintained within the IDP session ? Is there an
>"easy" way to do that ?

Nothing is easy. There should be some examples of accessing information in
the session in the JSP example page.

-- Scott