Release date for 3.1.0

[Paul Brears]

We're loading the SAML logout for each SP within iframes on our identity provider's logout page.
The Identity provider then displays a message based on the logout status returned by the SP

We currently think we need the setting on the cookie to make this work.

Paul

-----Original Message-----
From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
Sent: 05 March 2020 13:51
To: Shib Users <users at shibboleth.net>
Subject: RE: Release date for 3.1.0


> Is there a planned release date for 3.1.0?

No, not really. When I can, that's all I can say. Most of the major work is done but the cookie changes are huge and need testing.

With Chrome unlikely to remove the 2 minute rule and nobody else moving rapidly to change the default, I don't see much urgency.

> We act as IdP (with front channel single logout) to multiple third
> parties, one of which is using Shibboleth SP as proxy, and the impact
> to MacOs/iOS users of their service is acceptable if they're able to
> roll out the SameSite=None attribute across cookies.

If you mean they don't care about Safari breaking, they can do that already. The change includes the ability to accommodate Safari.

It also doesn't matter for logout, the SP doesn't require its cookie to be supplied for logout to work.

-- Scott

--
This message is confidential and should not be copied or disclosed to anyone. If this email has come to you in error, please delete it, along with any attachments. Any views or opinions presented are only those of the author and not those of RM. RM accepts no liability for any loss or damage which may be caused by software viruses and it is your responsibility to ensure that this email and any attachments are free of viruses when you receive it. You may use and apply this email and the information contained in it for the intended purpose only and RM shall not be liable in any way in respect of use for any other purpose. In respect of all other matters, to the fullest extent permitted by applicable law, RM disclaims all responsibility and liability for the contents of this email (including any attachments). Please note that RM may intercept incoming and outgoing email communications.

RM Education Ltd (Reg. No: 01148594) is a company registered in England and Wales with its registered office at 142B Park Drive, Milton Park, Abingdon, Oxon OX14 4SE; VAT No: GB 630 8236 56.