Specifying relayState to pass plain URL format for SLO in SP settings

[Gernot Hassenpflug]

Hello,

One of the simpleSAMLphp IdP's we communicate with seem unable to parse
correctly a SLO request where relayState is of the default form for us
as specified in the Sessions element:

RelayState=ss:mem:<reference>

Hence, I tried to find a way to overrite relayState for SLO only, to
pass a URL in plain form.

Despite searches in the Shibboleth Wiki, I could not find any
documentation on how to do this, the closest was that if the relayState
was left out (in Sessions) then the plain URL would be used in SLO.

Well, after trying to specify relayState as an emptty string in the
Logout element, which resulted in failed startup for XMLParsing, I
guessed some strings and quickly discovered that the following would
work:

<Logout relayState="url">SAML2 Local</Logout>

I have no idea if this is according to the specifications, or a happy
coincidence, but if anyone can confirm that this the way (or one of the
ways) to accomplish this, I would be most happy.

Also, if the documentation for relayState could be amended to cover this
case.

References:
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSingleLogoutService
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPServiceLogout
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPLogoutInitiator
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions

Regards,
Gernot Hassenpflug
-- 
Asahi Net, Inc.
Tokyo, Japan