Single Logout Endpoints in Metadata

[Jacques Le Roux]

Le 01/09/2017 à 14:38, Peter Schober a écrit :
> * Jacques Le Roux <jacques.le.roux at les7arts.com> [2017-09-01 13:15]:
>> If I need to do so, knowing that I use the SLO out-of-the-box (<Logout
>> asynchronous="false">SAML2 Local</Logout>), which SLO endpoint in metadata
>> should I set in metadata? If I need to set one...
> Simlpy (also) passing -L (for Logout) to the shib-metagen utilty
> provided with the SP distribution should include logout endpoints for
> the SP.
>
> -peter
Thanks Peter I used Shibboleth.sso/Metadata?L=true and got this diffs

-  <md:SPSSODescriptor protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+  <md:SPSSODescriptor AuthnRequestsSigned="1" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">

+  <md:SPSSODescriptor AuthnRequestsSigned="1" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:SOAP" Location="https://domainName/Shibboleth.sso/SLO/SOAP"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://domainName/Shibboleth.sso/SLO/Redirect"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://domainName/Shibboleth.sso/SLO/POST"/>
+    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://domainName/Shibboleth.sso/SLO/Artifact"/>

Is that OK? (sounds good to me)

Jacques