IDP answer to LogoutRequest

[Cantor, Scott]

On 5/7/21, 6:49 AM, "users on behalf of Ignacio Amoeiro Bosch" <users-bounces at shibboleth.net on behalf of ignacio.amoeiro at extern.ibsalut.es> wrote:

>    Should the IDP answer to every LogoutRequest with a LogoutResponse?

It makes an attempt to do so, but there are lots of reasons it wouldn't. It is explicity wrong to wait for a response to complete the work required on the SP side when that SP initiates the logout. ADFS has the same bug, FWIW (actually a more serious variant where its logout is contingent on getting only total success back from the IdP, which is impossible since partial success is a valid and virtually certain result).

-- Scott