RelayState value and SLO?

Liam Hoekenga liamr at umich.edu
Tue Oct 18 11:57:05 EDT 2016


We're working on Shib integration with IBM's API Manager product.

They're interested in SLO (hence my recent line of questions).

Our SSO / SLO is complicated by the fact that we're using an external
authenticator (Cosign) instead of allowing Shibboleth to handle
authentication internally.  For this most part, this hasn't been an
issue... but we customized (read "lobotomized") logout.vm, and I think
we're going to need to fix it.

I switched back to the standard logout.vm for the purposes of working on
this integration.

The vendor is expecting that the logout process to redirect the user upon
logout to a location specified in the RelayState.
Is this a reasonable expectation?
Or is this one of those implementation specific details?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161018/55a2f85a/attachment-0001.html>


More information about the users mailing list