SP Logout, redirecting to the IDP

[Steven Carmody]

Hi,

Currently, an application can kill the local SAML session by redirecting 
to (localhost)/Shibboleth.sso/Logout

Is there an *easy* way to tell the local Logout endpoint to then 
redirect to the Logout endpoint at the IDP associated with this session 
(if such an endpoint exists) ?

I know the app can append a return attribute on the url that is 
redirecting to Shibboleth.sso/Logout ... but then the app has to figure 
out the url for the IDP's Logout endpoint ... not necessarily an easy 
task for an app.  ;-)

thanks !