Release date for 3.1.0

[Joshua Brodie]

Hi Paul:

>We're loading the SAML logout for each SP within iframes on our identity
provider's logout page.

Could you share how this is being done? I have scored the wiki looking for
information.

Thanks. Regards.

On Thu, 5 Mar 2020 at 07:35, Paul Brears <pbrears at rm.com> wrote:

> We're loading the SAML logout for each SP within iframes on our identity
> provider's logout page.
> The Identity provider then displays a message based on the logout status
> returned by the SP
>
> We currently think we need the setting on the cookie to make this work.
>
> Paul
>
> -----Original Message-----
> From: users <users-bounces at shibboleth.net> On Behalf Of Cantor, Scott
> Sent: 05 March 2020 13:51
> To: Shib Users <users at shibboleth.net>
> Subject: RE: Release date for 3.1.0
>
>
> > Is there a planned release date for 3.1.0?
>
> No, not really. When I can, that's all I can say. Most of the major work
> is done but the cookie changes are huge and need testing.
>
> With Chrome unlikely to remove the 2 minute rule and nobody else moving
> rapidly to change the default, I don't see much urgency.
>
> > We act as IdP (with front channel single logout) to multiple third
> > parties, one of which is using Shibboleth SP as proxy, and the impact
> > to MacOs/iOS users of their service is acceptable if they're able to
> > roll out the SameSite=None attribute across cookies.
>
> If you mean they don't care about Safari breaking, they can do that
> already. The change includes the ability to accommodate Safari.
>
> It also doesn't matter for logout, the SP doesn't require its cookie to be
> supplied for logout to work.
>
> -- Scott
>
> --
> This message is confidential and should not be copied or disclosed to
> anyone. If this email has come to you in error, please delete it, along
> with any attachments. Any views or opinions presented are only those of the
> author and not those of RM. RM accepts no liability for any loss or damage
> which may be caused by software viruses and it is your responsibility to
> ensure that this email and any attachments are free of viruses when you
> receive it. You may use and apply this email and the information contained
> in it for the intended purpose only and RM shall not be liable in any way
> in respect of use for any other purpose. In respect of all other matters,
> to the fullest extent permitted by applicable law, RM disclaims all
> responsibility and liability for the contents of this email (including any
> attachments). Please note that RM may intercept incoming and outgoing email
> communications.
>
> RM Education Ltd (Reg. No: 01148594) is a company registered in England
> and Wales with its registered office at 142B Park Drive, Milton Park,
> Abingdon, Oxon OX14 4SE; VAT No: GB 630 8236 56.
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20200306/e46afe56/attachment.html>