Single Logout

Peter Schober peter.schober at univie.ac.at
Mon Dec 1 06:36:00 EST 2014


* Tomaz Majerhold <tomaz.majerhold at arnes.si> [2014-12-01 09:02]:
> So if I have 1 SP and multi virtual host which host each application, 
> can I configure SP for each virtual host to send notification?

A SAML IDP supporting SLO (so not the Shibboleth IDP) will only send
one SLO request per entityID. So if you're doing vhosting on the SP by
having multiple ACS URLs (one per vhost) as part of the same entityID
I don't think that can work for SLO (unless there's a way to multiplex
those SLO requests on your own and send them to /all/ your vhosts, or
something like that).
To use SLO as intended every application/vhost would need to be a
(logical) SP in itself (with its own entityID, that's the "unit" in
SAML).
-peter


More information about the users mailing list