IDPv3 Logout

[Karan Thakkar]

I have made following changes :

IN idp.properties

idp.session.slop = PT0S
idp.session.trackSPSessions = true
idp.session.secondaryServiceIndex = true
idp.session.defaultSPlifetime = PT2H
idp.logout.elaboration = true
idp.logout.authenticated = true
idp.session.StorageService = shibboleth.StorageService

In idp-metadata.xml
        <SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="
http://pathtoidp/idp/profile/Logout"
<http://pathtoidpidp/profile/SAML2/Redirect/SLO%22> />

         <SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="
http://pathtoidp/idp/profile/SAML2/POST/SLO" />
        <SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST-SimpleSign"
Location="http://pathtoidp/idp/profile/SAML2/POST-SimpleSign/SLO"/>
        <SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="
http://pathtoidp/idp/profile/SAML2/SOAP/SLO"/>

In sp-metadata.xml
<md:SingleLogoutService
Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="
http://pathtpsp/simple/modules/saml/sp/saml2-logout.php/default-sp"
ResponseLocation
= "pathtosp/simple/modules/core/www/authenticate.php"/>



2017-03-21 10:27:40,913 - DEBUG
[org.opensaml.saml.metadata.support.AttributeConsumingServiceSelector:186]
- Resolving AttributeConsumingService candidates from SPSSODescriptor
2017-03-21 10:27:40,913 - DEBUG
[org.opensaml.saml.metadata.support.AttributeConsumingServiceSelector:141]
- AttributeConsumingService candidate list was empty, can not select
service
2017-03-21 10:27:40,913 - DEBUG
[org.opensaml.saml.common.binding.impl.SAMLAddAttributeConsumingServiceHandler:138]
- Message Handler:  No AttributeConsumingService selected
2017-03-21 10:27:40,918 - DEBUG
[net.shibboleth.idp.saml.profile.impl.InitializeRelyingPartyContextFromSAMLPeer:132]
- Profile Action InitializeRelyingPartyContextFromSAMLPeer: Attaching
RelyingPartyContext based on SAML peer
http://pathtosp/simple/modules/saml/sp/metadata.php/default-sp
2017-03-21 10:27:40,944 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:293]
- Resolving relying party configuration
2017-03-21 10:27:40,945 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:305]
- Checking if relying party configuration EntityNames[
http://pathtosp/simple/modules/saml/sp/metadata.php/default-sp,] is
applicable
2017-03-21 10:27:40,945 - DEBUG
[net.shibboleth.idp.relyingparty.impl.DefaultRelyingPartyConfigurationResolver:307]
- Relying party configuration EntityNames[
http://pathtosp/simple/modules/saml/sp/metadata.php/default-sp,] is
applicable
2017-03-21 10:27:40,945 - DEBUG
[net.shibboleth.idp.profile.impl.SelectRelyingPartyConfiguration:136] -
Profile Action SelectRelyingPartyConfiguration: Found relying party
configuration EntityNames[
http://pathtosp/simple/modules/saml/sp/metadata.php/default-sp,] for
request
2017-03-21 10:27:40,952 - WARN
[net.shibboleth.idp.profile.impl.SelectProfileConfiguration:111] - Profile
Action SelectProfileConfiguration: Profile
http://shibboleth.net/ns/profiles/saml2/logout is not available for RP
configuration EntityNames[
http://pathtosp/simple/modules/saml/sp/metadata.php/default-sp,] (RPID
http://pathtosp/simple/modules/saml/sp/metadata.php/default-sp)
2017-03-21 10:27:40,979 - WARN
[org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed event
occurred while processing the request: InvalidProfileConfiguration
2017-03-21 10:27:40,980 - DEBUG
[org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154] -
No SAMLBindingContext or binding URI available, error must be handled
locally







Now on going to url "/idp/profile/Logout" it does show SPs currently in
session
on clicking yes it does not log them out
And the error message remains same in log :
Profile Action SelectProfileConfiguration: Profile
http://shibboleth.net/ns/profiles/saml2/logout is not available for RP
configuration EntityNames

Please help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170324/3c94b3d6/attachment-0001.html>