Logout

[Cantor, Scott]

On 12/18/14, 11:39 PM, "Sathish Anickode" 
<SAnickode at skytouchtechnology.com> wrote:

>I would like to confirm, if Shibboleth SAML 2.0 logout flow work as 
>follows:
> 
>We have three applications that will use SAML 2.0 to integrate with 
>Shibboleth IdP. A user is logged into all the three applications. When 
>the user issues a logout request from one of the application, the app 
>sends IdP a corresponding request
> to logout. Idp will in turn send a request to the other two application 
>before the user is logged out of IdP. If the process encounters an error 
>in any of the above steps, a PartialLogout result is returned else it 
>returns Success.

No. That is a description of SAML logout, which this IdP does not fully 
support without an extension that works in limited circumstances.

https://wiki.shibboleth.net/confluence/display/SHIB2/IdPEnableSLO

If you get anything resembling what you wrote above from that page, you're 
going to have to tell me how because I don't know what else to write.

-- Scott