Is Single Logout implemented in Idp v3.1.2 ?
Peter Schober
peter.schober at univie.ac.at
Fri Sep 11 11:32:38 EDT 2015
* Павел Шашко <pavel.shashko at gmail.com> [2015-09-11 17:17]:
> How can I do logout on the Idp side?
>
> Now I am trying to do so:
> When I start logout process from SP, I see request
> to.../idp/profile/SAML2/POST/SLO and redirect to logout.vm page, but when I
> try to open my application again - idp's login page does not appear. It
> seems like sp goes to idp and idp answers that all is ok - user is
> authenticated.
First I'd determine whether the SP's session was in fact terminated
(logs or whatever your SP gives you), any application sessions
involved, too, and whether a new session on the SP was created based
on a new SAML assertion from the IDP, due to an SSO session still
being active with the IDP.
> I think if I can remove session from idp storage it will be solution of my
> problem.
The bug tracker issue Tom just referred you to is where the work on
this happens.
-peter
More information about the users
mailing list