Logout SAML Error message v3

Cantor, Scott cantor.2 at osu.edu
Sat Jan 17 14:11:42 EST 2015


Your "bug" is that you're trying to use client-side session storage with logout, which is impossible at present. That only changes if we manage to hack something together with DOM storage as a back-end, cookies will never work. Setting the other properties doesn’t affect storage implementations that don't support them.

> It's also saying this:
> 
> 2015-01-16 22:15:30,519 - DEBUG
> [net.shibboleth.idp.saml.profile.impl.ExtractSubjectFromRequest:144] -
> Profile Action ExtractSubjectFromRequest: No Subject NameID or
> NameIdentifier in message

That's an unfortunate message that doesn't matter for logout requests, the subject doesn't get "decoded" on logouts, the NameID just gets used directly.

-- Scott



More information about the users mailing list