SLO endpoints with IdP 2.4.0
Cantor, Scott
cantor.2 at osu.edu
Wed Apr 23 17:36:05 EDT 2014
On 4/23/14, 4:34 PM, "Liam Hoekenga" <liamr at umich.edu> wrote:
>
>We've got SPs that are excited to use the SLO endpoints.
I guess they don't care that all the other SPs are left out when they use
it? We should call this the "Selfish Logout" endpoint. ;-)
>16:02:14.654 - 141.211.192.9 - ERROR
>[edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatch
>erServlet:88] - Error occurred while processing request
>java.lang.ClassCastException:
>org.opensaml.saml2.core.impl.LogoutRequestImpl cannot be cast to
>org.opensaml.saml2.core.AuthnRequest
They're sending the request to the wrong endpoint, presumably due to you
distributing that error in the metadata you gave them.
I don't know what it is from memory, but it's probably /POST/SLO instead
of /POST/SSO.
-- Scott
More information about the users
mailing list