Zoom Integration with Shibboleth IdP v3 and non-signed logout request

[Scott Koranda]

Hello,

This previous thread

http://shibboleth.1660669.n2.nabble.com/Zoom-Integration-with-Shibboleth-IdP-td7611084.html

details some issues when integrating the Shibboleth IdP with Zoom,
specifically that Zoom does not support sending encrypted assertions.

After making the appropriate configuration change with the IdP v3 to
send an unencrypted assertion "login" works.

The Zoom UI presents a "SIGN OUT" link. Clicking that causes the
browser to visit the IdP v3 SLO endpoint
/idp/profile/SAML2/Redirect/SLO (that is the URL endpoint I configured
Zoom to use). The SAML sent with the redirect is an unsigned
<LogoutRequest>.

I would like to understand how other integrators are choosing to
handle "SIGN OUT"?

I cannot find any Zoom documentation on other SAML2 logout
capabilities (other bindings that might or might not be properly
supported).

Thanks,

Scott K