SLO with SAML question.

[Ernie Kinsey]

I’m attempting to integrate something called Panopto with Shibboleth.  Panopto is actually looking for a SAML2 configuration, which is, as I understand it, not a “pure” Shibboleth kind of thing.

I actually got it to login properly, but am struggling with getting it to logout properly.  There’s a setting in the applications admin panel called “Federated Sign-out URL” that I think needs to be adjusted (maybe).  It currently reads:

https://idp-test.cpcc.edu/idp/profile/SAML2/Redirect/SLO

It’s the SLO business that has me stumped, because although I’ve been here:

https://wiki.shibboleth.net/confluence/display/IDP30/LogoutConfiguration#LogoutConfiguration-SAMLLogout

And have experimented with the suggestions under the “SAML Logout” section of that document, but I’m still not understanding what I need to get this to function, or have done it incorrectly, or both.

The log that results when logging off as I have it configured now is:

2018-04-20 08:52:27,662 - DEBUG [org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder:64] - Decoded RelayState: null
2018-04-20 08:52:27,668 - ERROR [org.opensaml.profile.action.impl.DecodeMessage:73] - Profile Action DecodeMessage: Unable to decode incoming request
org.opensaml.messaging.decoder.MessageDecodingException: No SAMLRequest or SAMLResponse query path parameter, invalid SAML 2 HTTP Redirect message
                at org.opensaml.saml.saml2.binding.decoding.impl.HTTPRedirectDeflateDecoder.doDecode(HTTPRedirectDeflateDecoder.java:73)
2018-04-20 08:52:27,675 - WARN [org.opensaml.profile.action.impl.LogEvent:76] - An error event occurred while processing the request: UnableToDecode
2018-04-20 08:52:27,676 - DEBUG [org.opensaml.saml.common.profile.logic.DefaultLocalErrorPredicate:154] - No SAMLBindingContext or binding URI available, error must be handled locally

Has anyone had direct experience with integrating this particular application (Panopto) with Shibboleth, and, if so, would you be willing to share what you know?  Failing that, I’m looking for some general guidance on how to do what I’m describing – in short, any help appreciated.

Thanks,
Ernest K. Kinsey, Jr.
Central Piedmont Community College
Charlotte, NC
(704) 330-6530.



________________________________

This e-mail, including any attachments, is intended only for the addressee's use and may contain confidential and proprietary information. If you are not the intended recipient, you are hereby notified that any retention, dissemination, reproduction, or use of the information contained in this e-mail is strictly prohibited. If you have received this e-mail by error, please delete it and immediately notify the sender. Thank you for your cooperation.