Synchronous SAML SLO

[Martin Haase]

Hi list,

this is a single IdP3.2.1, single SP 2.6. I set the LogoutInitiator for
the SP to asynchronous="false". Upon access to
sp/Shibboleth.sso/Logout?return=XXX, the SP correctly does the SLO
request, the IdP returns a 200 with the "logout complete" view. Then in
SAML tracer, I can see a LogoutResponse being sent back to the SP, and a
GET request to XXX. However, what I *see* in the browser is still the
"logout complete" view i.e. the whole response logic seems to work
behind the scenes. How can this be? What I expected was the SP to report
the logout operation, and/or a return to XXX. I remember this used to
work with IdP 2.4 those days.

Cheers
Martin

-- 
Dr. Martin Haase, Solutions Engineer

DAASI International GmbH        
Europaplatz 3                   
D-72072 Tübingen                
Germany                    

phone: +49 7071 407109-0
fax:   +49 7071 407109-9  
email: martin.haase at daasi.de
web:   www.daasi.de

Sitz der Gesellschaft: Tübingen
Registergericht: Amtsgericht Stuttgart, HRB 382175
Geschäftsleitung: Peter Gietz


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2247 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20161208/312d327e/attachment.p7s>