IDP logout in V3

[Wessel, Keith]

Following up to my own note, it appears I might be missing something.

After trying a logout request with client side storage enabled per IDP V3 defaults, I get an IDP error. This error was described by DaveL back in January on the list and was logged in Gira under IDP-576.

The discussion and ticket that followed seemed to indicate that IDP logout won't work when using client-side storage.

Has something changed since January that I'm not finding? Or is that still the case?

Thanks,
Keith


-----Original Message-----
From: Wessel, Keith 
Sent: Monday, June 29, 2015 10:18 AM
To: 'Shib Users'
Subject: RE: IDP logout in V3

Got 'ya. As long as it fails rather than making the userj think they're logged out when they're not, it'll probably float around here.

Thanks very much,
Keith


-----Original Message-----
From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Cantor, Scott
Sent: Friday, June 26, 2015 4:45 PM
To: Shib Users
Subject: RE: IDP logout in V3

> Thanks, Scott. By "generally", are there caveots for IDP logout with session
> cookies that I need to be aware of?

The edge case is if you deliver a SAML logout request that identifies the session but don't deliver the cookie. I don't believe I implemented anything yet to peg the NameID for later disposal, so that's a hole and I think it will fail the request.

-- Scott
 

-- 
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net