SAML2 logout failing - Unknown Principal

[Cantor, Scott]

> I've checked the NameID in the login response and the NameID in the logout
> request and they are the same. Also, I didn't found any errors in the section
> where the session was saved.

Both trackSPSessions and secondaryServiceIndex properties have to be true. Generally that would mean they're not, but otherwise it just is what it is, the session's not there. Possibly a second login to the same SP was done.

-- Scott