Is Single Logout implemented in Idp v3.1.2 ?

[Павел Шашко]

Thanks, Scott.
I have carefully checked my idp.properties and understood, that setting
trackSPSessions was 'false'.
I set it to true and now logout for one SP works perfect, but if I try to
login to second app using SSO and after that try to do single logout,
really logout occurs only on that SP, where I began logout process. I saw
this problem in one of the issues.

I see possible workaround in my situation: I init logout process in the
first application by opening specific url and after succesfull logout I see
login.vm page of idp. Can I after that do subsequent redirect to specific
logout url of the second application? What configuration changes on the
side of idp must I do?

Thanks,
Pavel

2015-09-12 4:35 GMT+03:00 Cantor, Scott <cantor.2 at osu.edu>:

> On 9/11/15, 11:16 AM, "users on behalf of Павел Шашко" <
> users-bounces at shibboleth.net on behalf of pavel.shashko at gmail.com> wrote:
>
>
>
> >How can I do logout on the Idp side?
>
> If you want SAML logout to work even minimally, you have to switch to
> using a server-side storage mechanism for the sessions, and changing
> various options related to logout support (the trackSPSessions and
> secondaryIndex properties in idp.properties). Until then the logout
> requests will simply fail.
>
> >Now I am trying to do so:
> >When I start logout process from SP, I see request
> to.../idp/profile/SAML2/POST/SLO and redirect to logout.vm page, but when I
> try to open my application again - idp's login page does not appear. It
> seems like sp goes to idp and idp answers that all is ok - user is
> authenticated.
>
> Because the logout request failed.
>
> >I don't see any erros in idp log. Seems logout process ends successful.
>
> I very much doubt that, but I also know there are some logging issues
> causing problems when people attempt to use SAML logout without configuring
> the features required for that, it's a bug being worked on.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20150914/536a37b3/attachment.html>