How does Shibboleth support back-channel SLO over SOAP?

Cantor, Scott cantor.2 at osu.edu
Mon Apr 30 10:28:03 EDT 2018


> Does this mean that the Shibboleth IdP does not support back channel SLO
> over SOAP, as mentioned in the wiki documentation
> https://wiki.shibboleth.net/confluence/display/IDP30/LogoutConfiguration#
> LogoutConfiguration-SAMLLogout

"SPs can request a logout using either front- or back-channel SAML bindings (typically HTTP-Redirect on the front, SOAP on the back). The IdP supports reception of either type of request, but currently cannot propagate logout using SOAP (but if you rely on a server-side session storage option, it can terminate the session at the IdP)."

I think that literally answers your question, on top of which you found the open issue for implementing the thing you keep asking if it supports, which quite obviously means we don't support it.

-- Scott



More information about the users mailing list