Shibboleth logout redirection problem
Andrew Morgan
morgan at orst.edu
Thu Jan 12 14:19:24 EST 2017
On Thu, 12 Jan 2017, Cantor, Scott wrote:
>> I don't know how to configure this though, it seems like if I add a
>> ?return=... it will just get cut off and goes to logout page. Any
>> advice is appreciated. Thank you.
>
> I have answered that a dozen or more times. It is not supported, and
> cannot be as long as single logout is part of the model. The IdP
> controls the UI. If you want something else, you'll have to build your
> own logout flow or wait for a future version with more options and more
> complexity. In *no* case can you expect what you're describing to be
> interoperable or reliable, so as a general matter, don't do it. Services
> cannot expect control of the UI during logout since it is not specified
> by any standard that they would.
Since we migrated our CAS protocol support from Jasig CAS to Shibboleth
over the winter break, I've had this same request from our customers.
I was considering adding some simple URL parameter processing to
logout.vm. If the parameter is present, write a simple message to the
screen with the provided (sanitized) URL.
It sounds like you're saying that won't work, but I don't understand why.
Thanks,
Andy
More information about the users
mailing list