Reasons to use/not use HTML local storage?

[Cantor, Scott]

On 11/30/15, 4:36 PM, "users on behalf of Wessel, Keith" <users-bounces at shibboleth.net on behalf of kwessel at illinois.edu> wrote:



>Thanks, Scott. Yes, that does, in fact, appear to be the case. I get an IDP error with this feature enabled when performing an SAML logout from my favorite non-Javascript browser (Lynx).

What's the error? That isn't what I would expect, since it's still obligated to tell the SP something. I thought it would actually just return to the SP.

>So, as you pretty much said, one must ask if they can require their users to have Javascript-capable browsers that can support HTML Local storage before enabling this feature and then publishing an SAML Logout endpoint in metadata.

Well, that depends what you think it should do if a logout fails, I guess. And probably whether you can adjust it to do what you prefer that it do. But nothing will ever be universal and it wasn't designed to assume that. It's either not working correctly or maybe we have different expectations on what it should do.

-- Scott