shibboleth logout doesn't redirect

[Cantor, Scott]

On 9/24/20, 9:53 AM, "users on behalf of Bezpaltchikov, Alexei V" <users-bounces at shibboleth.net on behalf of alexei-bezpaltchikov at uiowa.edu> wrote:

>    Is it possible to suppress Logout Complete page and get redirected back to my website landing page? Is there a setting
> somewhere in the shibboleth2.xml?

The SP cannnot control the UI for a SAML logout and you cannot rely on getting control back. And the Shibboleth IdP will never allow that. That is fundamentally impossible because people want the IdP to support logout, and that can't be done with full-frame redirects, ergo it has to be asynchronous frames or post-message things in Javascript.

If you can't live with that, that's fine, just don't issue a SAML logout.

Under the covers, the SP will receive a response in a hidden frame and it will honor the return location within that hidden frame, but since any cleanup should happen before the logout request to the IdP, it serves little purpose.

The SP does get control back if the original LogoutRequest results in an immediate error of certain types that allow for a response.

-- Scott