Single Logout
Peter Schober
peter.schober at univie.ac.at
Mon Dec 1 06:36:00 EST 2014
* Tomaz Majerhold <tomaz.majerhold at arnes.si> [2014-12-01 09:02]:
> So if I have 1 SP and multi virtual host which host each application,
> can I configure SP for each virtual host to send notification?
A SAML IDP supporting SLO (so not the Shibboleth IDP) will only send
one SLO request per entityID. So if you're doing vhosting on the SP by
having multiple ACS URLs (one per vhost) as part of the same entityID
I don't think that can work for SLO (unless there's a way to multiplex
those SLO requests on your own and send them to /all/ your vhosts, or
something like that).
To use SLO as intended every application/vhost would need to be a
(logical) SP in itself (with its own entityID, that's the "unit" in
SAML).
-peter
More information about the users
mailing list