Release date for 3.1.0

Joshua Brodie josbrodie at
Fri Mar 6 18:32:42 EST 2020

Hi Paul:

>We're loading the SAML logout for each SP within iframes on our identity
provider's logout page.

Could you share how this is being done? I have scored the wiki looking for

Thanks. Regards.

On Thu, 5 Mar 2020 at 07:35, Paul Brears <pbrears at> wrote:

> We're loading the SAML logout for each SP within iframes on our identity
> provider's logout page.
> The Identity provider then displays a message based on the logout status
> returned by the SP
> We currently think we need the setting on the cookie to make this work.
> Paul
> -----Original Message-----
> From: users <users-bounces at> On Behalf Of Cantor, Scott
> Sent: 05 March 2020 13:51
> To: Shib Users <users at>
> Subject: RE: Release date for 3.1.0
> > Is there a planned release date for 3.1.0?
> No, not really. When I can, that's all I can say. Most of the major work
> is done but the cookie changes are huge and need testing.
> With Chrome unlikely to remove the 2 minute rule and nobody else moving
> rapidly to change the default, I don't see much urgency.
> > We act as IdP (with front channel single logout) to multiple third
> > parties, one of which is using Shibboleth SP as proxy, and the impact
> > to MacOs/iOS users of their service is acceptable if they're able to
> > roll out the SameSite=None attribute across cookies.
> If you mean they don't care about Safari breaking, they can do that
> already. The change includes the ability to accommodate Safari.
> It also doesn't matter for logout, the SP doesn't require its cookie to be
> supplied for logout to work.
> -- Scott
> --
> This message is confidential and should not be copied or disclosed to
> anyone. If this email has come to you in error, please delete it, along
> with any attachments. Any views or opinions presented are only those of the
> author and not those of RM. RM accepts no liability for any loss or damage
> which may be caused by software viruses and it is your responsibility to
> ensure that this email and any attachments are free of viruses when you
> receive it. You may use and apply this email and the information contained
> in it for the intended purpose only and RM shall not be liable in any way
> in respect of use for any other purpose. In respect of all other matters,
> to the fullest extent permitted by applicable law, RM disclaims all
> responsibility and liability for the contents of this email (including any
> attachments). Please note that RM may intercept incoming and outgoing email
> communications.
> RM Education Ltd (Reg. No: 01148594) is a company registered in England
> and Wales with its registered office at 142B Park Drive, Milton Park,
> Abingdon, Oxon OX14 4SE; VAT No: GB 630 8236 56.
> --
> For Consortium Member technical support, see
> To unsubscribe from this list send an email to
> users-unsubscribe at
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the users mailing list