IdPv3 SLO redirect request failures

[Nate Klingenstein]

The /idp/profile/Logout handler is way more predictable.

Both of them lead to mostly the same questions and problems.

Yes, but the word “predictable” was chosen carefully here.

To me, the difference is more in the scope of the contract with the SP: a redirect endpoint offers no guarantees other than “you can dump the user here when you’re done”.  The actual SLO specification is associated with a bunch of normative behavior that is hard to make real in a highly distributed environment with web browsers as clients.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160309/5b801c2d/attachment.html>