front-channel SLO iframe cross-origin problem

[Peter MOLNAR]

Dear All!

I am playing with front-channel SLO on Shibboleth 3.2.0.
IDP is on idp.example.com, and SP is on sp1.example.com.

Using Google Chrome (Version 47.0.2526.111), everything works fine until
the point where the JS script tries to read the content of the iframe
(system\views\logout\propagate.vm).
At that point I get: Failed to read the 'contentDocument' property from
'HTMLIFrameElement': Blocked a frame with origin "http://idp.example.com"
from accessing a cross-origin frame "http://sp1.example.com".

Could you please give me a hint on what did I do wrong?

Thank you!

Peter


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160204/f7dd8765/attachment.html>