cannot process saml2p:LogoutResponse

[Marcello Marangio]

Hi all

I have a shibboleth SP3 configured to use a wso2 Identity Manager as IDP.

there is no problem logging in.

Logging out the IDP sends this logoutResponse

<saml2p:LogoutResponse 
Destination="https://iamlogin.sistema.puglia.it/Shibboleth.sso/SAML2/POST” 
ID="_d83e8f0c5a74d32ed265a3e40094b76c" InResponseTo=“_235132ad47eeb623f54c2423b2ef8895"
IssueInstant="2022-06-15T15:06:11.638Z” 
Version="2.0” 
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol" > 
  <saml2:Issuer Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity” 
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" >https://regione.puglia.it</saml2:Issuer> <https://regione.puglia.it%3C/saml2:Issuer%3E>
<saml2p:Status> <saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" /> 
  </saml2p:Status> 
</saml2p:LogoutResponse>

And shibboleth SP complains: 
"Incoming message was not a samlp:Response."

I understand it’s basically a namespace problem, but the logoutresponse is correct.

How can I resolve this problem?

Thanks
Marcello
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220615/8e9c6d20/attachment.htm>