SLO SessionNotFound

[Liam Hoekenga]

In our effort to get off of our legacy SSO, we're experimenting with SLO
(yay!).
We're currently using JPA session storage.

When a SLO request comes through, I see errors like..

2019-03-14 17:46:34,120 - DEBUG
[net.shibboleth.idp.saml.saml2.profile.impl.ProcessLogoutRequest:356] -
xxx.xxx.xxx.xxx - Profile Action ProcessLogoutRequest: IdP session
f0f1d32d607ab70fd5125374320f0470dc39cd8b12d47b4fc4e3413f2a7c516c does not
contain a matching SP session
2019-03-14 17:46:34,120 - INFO
[net.shibboleth.idp.saml.saml2.profile.impl.ProcessLogoutRequest:402] -
xxx.xxx.xxx.xxx - Profile Action ProcessLogoutRequest: No active session(s)
found matching LogoutRequest
2019-03-14 17:46:34,121 - DEBUG
[org.springframework.webflow.execution.ActionExecutor:53] - xxx.xxx.xxx.xxx
- Finished executing
net.shibboleth.idp.saml.saml2.profile.impl.ProcessLogoutRequest at 55b99cba;
result = SessionNotFound

In the storage records table, I see a record of id of _session and context
"f0f1d32d607ab70fd5125374320f0470dc39cd8b12d47b4fc4e3413f2a7c516c" that
appears to have a svcs record for the SP entityid in question.

I see another context
f0f1d32d607ab70fd5125374320f0470dc39cd8b12d47b4fc4e3413f2a7c516c record
with an id that matches the SP's entityid.

I see another context for the SP's entityid with an id of my principal
name, and a value that contains
f0f1d32d607ab70fd5125374320f0470dc39cd8b12d47b4fc4e3413f2a7c516c.

The entries in StorageRecords look to me like the appropriate data is
there.
What is it looking for that it can't find?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190314/02d1d647/attachment.html>