Shibboleth SAML logout redirection.

Charles A apitest4 at gmail.com
Wed Oct 30 01:36:35 EDT 2013


Hi,

I have implemented Shibboleth SP and IDP, which works fine.

I implemented a logout mechanism (SP initiated) by accessing the following
URL (/Shibboleth.sso/Logout). which is redirected to the IDP(logout.jsp)
and remains in the same location(which is fine). using the following
configuration in shibboleth2.xml

            <LogoutInitiator type="Chaining" Location="/Logout">
                <LogoutInitiator type="SAML2"
template="bindingTemplate.html"/>
                <LogoutInitiator type="Local" />
            </LogoutInitiator>

I want to show the page in the SP after the logout process is completed in
the IDP. As mentioned in the documentation (
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogoutInitiator)
I tried to set asynchronous to false(My SP version : 2.5.2, My IDP version
: 2.4.0)  as shown below:

           <LogoutInitiator type="Chaining" Location="/Logout"
asynchronous="false">
                <LogoutInitiator type="SAML2"
template="bindingTemplate.html"/>
                <LogoutInitiator type="Local" />
            </LogoutInitiator>

But it shows the error in SP when I initiated the logout process

shibsp::ConfigurationException

The system encountered an error at Wed Oct 30 10:53:29 2013

To report this problem, please contact the site administrator at
root at localhost.

Please include the following message in any email:

shibsp::ConfigurationException at (
http://10.0.0.231/Shibboleth.sso/SLO/Redirect)

Shibboleth handler invoked at an unconfigured location.


Is there any problem with the value set to asynchronous in the
logoutinitiator?

How can I mention to which page in SP the control has to be redirected
after the logout process is completed in the IDP?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131030/4dc54f86/attachment-0001.html 


More information about the users mailing list