Single Logout

[Tomaz Majerhold]

Dne 1.12.2014 12:36, pis(e Peter Schober:
> * Tomaz Majerhold <tomaz.majerhold at arnes.si> [2014-12-01 09:02]:
>> So if I have 1 SP and multi virtual host which host each application,
>> can I configure SP for each virtual host to send notification?
> A SAML IDP supporting SLO (so not the Shibboleth IDP) will only send
> one SLO request per entityID. So if you're doing vhosting on the SP by
> having multiple ACS URLs (one per vhost) as part of the same entityID
> I don't think that can work for SLO (unless there's a way to multiplex
> those SLO requests on your own and send them to /all/ your vhosts, or
> something like that).
> To use SLO as intended every application/vhost would need to be a
> (logical) SP in itself (with its own entityID, that's the "unit" in
> SAML).
> -peter
Ok, what about scenario when we have one SP and we have Apache HTTP 
definitions for more Locations match:

  #AAI HOSTING
         <LocationMatch "^/acert/login.zul.*$">
                 #ShibRedirectToSSL 443
                 AuthType shibboleth
                 ShibRequireSession On
                 ShibUseHeaders On
                 require valid-user
         </LocationMatch>

         <LocationMatch "^/acert.?$|^/acert/index.zul.*$">
                 #ShibRedirectToSSL 443
                 AuthType shibboleth
                 ShibRequireSession Off
                 ShibUseHeaders On
                 require shibboleth
         </LocationMatch>


         #DNS HOSTING
         <LocationMatch "^/dns/login.zul.*$">
                 #ShibRedirectToSSL 443
                 AuthType shibboleth
                 ShibRequireSession On
                 ShibUseHeaders On
                 require valid-user
         </LocationMatch>

         <LocationMatch "^/dns.?$|^/dns/index.zul.*$">
                 #ShibRedirectToSSL 443
                 AuthType shibboleth
                 ShibRequireSession Off
                 ShibUseHeaders On
                 require shibboleth
         </LocationMatch>

Can be defined for each LocationMatch seperatly Notification?

|<||Notify|
|||Channel||=||"back"|
|||Location||=||"https://#YOUR_HOSTNAME#/#PATH_TO#/logout.php" 
<https:/#YOUR_HOSTNAME#/#PATH_TO#/logout.php>||/>


PS: It is very bad if it not impossible and also WSDL definition is not 
valid(and not standard)

Regerds, Tomaz
|

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141201/0e5eef3a/attachment-0001.html