SLO responses IdP3.2.x

Cantor, Scott cantor.2 at osu.edu
Fri Dec 2 11:05:43 EST 2016


On 12/2/16, 11:00 AM, "users on behalf of O'Dowd, Josh" <users-bounces at shibboleth.net on behalf of Josh.O'Dowd at mso.umt.edu> wrote:

> Is there any scenario in SP-initiated SAML2 SLO--whether front channel, or back--where the IdP is configured to
> redirect the user back to an SP URL that is not the SLO binding location, instead of sending a LogoutResponse to
> the SP binding location?

No, but the IdP doesn't redirect the *user* anywhere unless there's an error. The redirect is invisible otherwise, no matter where it goes. It will not be in the location bar.

-- Scott




More information about the users mailing list