Why does LogoutInitiator with chaining "SAML2 Local" does not redirect to the returnUrl supplied in relayState from Idp?

[Cantor, Scott]

Offhand I would guess the IdP is responding with failure in the LogoutResponse and not Success, but that's just guessing. The code does check for RelayState and treats it as a return location to recover based on the type of relayState setting the SP is using.

It's moot since SPs cannot rely on control of the UI if they use SAML logout. Most IdPs will (and if they actually support SAML logout, have to) maintain control of the UI.

-- Scott