SLOLogoutProfileHandler not finding Session - configuration ?

[Cantor, Scott]

On 1/6/14, 1:36 PM, "Mackay, Rob" <Rob.Mackay at ellucian.com> wrote:

>The session is not found by the SLOLogoutProfileHandler because the
>NameID does not contain the Destination or Issuer in the session index
>creation method.

Neither of those fields is relevant to logout or session indexing, but
beyond that I don't know what method you mean. The cache is fundamentally
incapable of supporting logout unless the identifiers issued are unique
(i.e., transients, and even then you have to take care). That's not
fixable. It cannot return more than one session for a given identifier, so
by definition if there's more than one session involved, it will not be
able to process logouts without problems.

>My question
>Is there a configuration element that would allow me to include the
>additional values in the lookup index for Logout or should the creation
>of the index exclude these properties by configuration to allow
> the session ids to match ?

I don't really understand any of that, but there is nothing you can
configure that fixes the design limitations of the session cache.

-- Scott