[EXTERNAL] RE: SLO with SAML question.

[Ernie Kinsey]

To all,

I have a slightly better version of the original question I tried to ask, and that Scott answered, and it’s this: how do I configure a SAML2 SLO endpoint?  I’m looking at the documentation here:

https://wiki.shibboleth.net/confluence/display/IDP30/LogoutConfiguration

which is talking about enabling some properties in idp.properties.  Of what’s mentioned, I’m only seeing the following as “Required IdP Properties”:

# Support lookup by SP for SAML logout
idp.session.secondaryServiceIndex = true

Which I’ve enabled, but still no joy.  I suspect I’m not doing something very basic here and don’t know if there’s a better place I should be looking for guidence on how to do what I’m trying to do, namely, implement a SAML2 SLO for a vendor-hosted application.  If there’s a better place, or places, I should be looking, or if there are other suggestions, please let me know – as always, any assistance is appreciated.

Thanks,
Ernest K. Kinsey, Jr.
Central Piedmont Comminuty College
Charlotte, NC.

On 4/20/18, 12:17 PM, "Cantor, Scott" <cantor.2 at osu.edu> wrote:

    > I actually got it to login properly, but am struggling with getting it to logout
    > properly.  There’s a setting in the applications admin panel called “Federated
    > Sign-out URL” that I think needs to be adjusted (maybe).

    That's not SAML logout, it's proprietary, just a redirect.

    -- Scott

    --
    For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
    To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net


________________________________

This e-mail, including any attachments, is intended only for the addressee's use and may contain confidential and proprietary information. If you are not the intended recipient, you are hereby notified that any retention, dissemination, reproduction, or use of the information contained in this e-mail is strictly prohibited. If you have received this e-mail by error, please delete it and immediately notify the sender. Thank you for your cooperation.