shibboleth sp and error/logout templates

[Peter Schober]

* Jan Vilhuber <JVilhuber at absolute.com> [2017-09-15 10:01]:
> For this to work, I need to know, in the template, which IDP the
> user used and what the IDP SLO endpoint is. I didn't see any
> variables that would work for this. Are there any I might have
> missed or have evaded documentation?

If not in the template you could certainly do it in the application
(Shib-Identity-Provider gives you the entityID, though you'd have to
get the protocol endpoints from the metadata yourself, then, I guess.)

> Alternatively, can I configure *2* Logout endpoints? One would do
> "local" (and display something similar to the above message) and a
> second one that does 'saml2' behavior?

Certainly.

-peter