Shibboleth logout redirection problem

Andrew Morgan morgan at orst.edu
Thu Jan 12 14:19:24 EST 2017


On Thu, 12 Jan 2017, Cantor, Scott wrote:

>> I don't know how to configure this though, it seems like if I add a 
>> ?return=... it will just get cut off and goes to logout page. Any 
>> advice is appreciated. Thank you.
>
> I have answered that a dozen or more times. It is not supported, and 
> cannot be as long as single logout is part of the model. The IdP 
> controls the UI. If you want something else, you'll have to build your 
> own logout flow or wait for a future version with more options and more 
> complexity. In *no* case can you expect what you're describing to be 
> interoperable or reliable, so as a general matter, don't do it. Services 
> cannot expect control of the UI during logout since it is not specified 
> by any standard that they would.

Since we migrated our CAS protocol support from Jasig CAS to Shibboleth 
over the winter break, I've had this same request from our customers.

I was considering adding some simple URL parameter processing to 
logout.vm.  If the parameter is present, write a simple message to the 
screen with the provided (sanitized) URL.

It sounds like you're saying that won't work, but I don't understand why.

Thanks,
 	Andy


More information about the users mailing list