SP Logout, redirecting to the IDP

[Steven Carmody]

On 1/12/15 4:17 PM, Cantor, Scott wrote:
>> Is there an *easy* way to tell the local Logout endpoint to then
>> redirect to the Logout endpoint at the IDP associated with this session
>> (if such an endpoint exists) ?
>
> Well, there's SAML and there's "not SAML". Hitting that endpoint
already issues a SAML logout request by default if a SAML endpoint
exists at the IdP. If not, and you want to do something proprietary,
you'd use a return parameter and set that to go to the IdP (and then
possibly somewhere else by embedding a nested return parameter and doing
something with it on the IdP end).
>

Thanks -- I've seen so few IDPs with Logout endpoints in their metadata 
that I didn't realize that adding that element was the magic elixir. ;-)

Is there any chance that the SP, when it does this redirect, could add 
an attribute to the redirect url telling the IDP the entityID value of 
the SP which is doing the redirect to the Logout endpoint ?