httpd & Shibboleth SP: select logout handler based on Shib-AuthnContext-Class

Cantor, Scott cantor.2 at
Wed Oct 23 09:18:21 EDT 2019

On 10/23/19, 5:33 AM, "users on behalf of Jakub Danek" <users-bounces at on behalf of jakub.danek at> wrote:

> Unfortunately, I have not been able to figure out if it is possible to access Shib-AuthnContext-Class inside httpd request > processing and perform redirect based on its value.

Standard variable provided by the SP.

> Also, am I correct in assuming that the IdP is actually misbehaving when its metadata offer SLO endpoints, but they work
> only for some of the authentication methods?

It's misbehavior.

-- Scott

More information about the users mailing list