Supported use of /Shibboleth.sso/Logout?redirect-URL on SP 3.1.0.1

[Michael Brogan]

Thanks, Scott. I overlooked that “(NOT upgrades)” statement in the release notes. That would explain the different behavior. The release notes say limitRedirects=exact is the default on fresh installs but the “Sessions” wiki page still says “None” is the default. That threw me off the trail.

—Michael

> On Apr 27, 2020, at 5:05 PM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> 
>> 
>> Is the redirect policy configurable or baked in the code? Would you expect different behavior between an upgraded SP
>> and a fresh install?
> 
> https://wiki.shibboleth.net/confluence/display/SP3/ReleaseNotes#ReleaseNotes-OtherHardening
> 
> -- Scott
> 
> 
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net