idp.encryption.optional and SLO

[Cantor, Scott]

> > Should "idp.encryption.optional=true" be honored during SLO?
> > I don't think it is, currently.
> 
> Should be (I don't actually see how it could be doing otherwise since it's
> inheriting from the same code). I'll review the code but you should file a bug,
> I'm in the middle of something else at the moment.

I reviewed and it's definitely taking significant steps to honor that setting but the only time this comes up is propagating logout to SPs, which is a very poorly tested scenario that requires a lot of strange code internally and probably has a bug.

Attaching a DEBUG log with the bug report should help me pin down what it's doing.

-- Scott