Single Logout (SLO)

[Cantor, Scott]

On 7/25/17, 4:56 PM, "users on behalf of Muzinich, Mike" <users-bounces at shibboleth.net on behalf of MuziniM at losrios.edu> wrote:

> I am attempting to configure SLO with 2 SP’s but am obviously missing something.  Below are the applicable entries in the 
> idp.properties file.  When I log out of the first SP, I get the “You have requested to be signed out of the following services”
> message with both SP’s listed but am still able to access the second SP.

Whether it works or not is dependent on many factors (a well-configured browser will prevent it from working at all) and whether you're even really logged out is a function of SP/application integration. Also, a SAML logout from SP A should not result in SP A being listed on that page, it should only list the others, IIRC. It excludes the initiating SP from the list.

If you get a green check next to an SP, then it received a successful LogoutResponse from that SP, and at that point if it still "works", then that SP is not implementing logout for real, it's faking it.

> When I logout of the second SP I don’t get the “You have requested to be signed out of the following services” message.

If you don't say what you do get, then I'm not sure what I can tell you.
 
-- Scott