SingleLogout Service Google Apps for education

[Steve Herrera]

The reason I thought it would support it is because Google has a config
requesting *Sign-out Page URL. * I pointed that to our IDP Logout page and
it redirects it correctly there. I also found Google has a URL
https://accounts.google.com/Logout  that will logout all sessions (which we
are fine with). I put that in the metadata as:

<SingleLogoutService Binding=
"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"

                   Location="https://accounts.google.com/Logout" />


Now, when I click logout on the Gmail side, I am taken to our IDP logout
page that says:


*Would you like to attempt to log out of all services accessed during your
session? Please select Yes or No to ensure the logout operation completes,
or wait a few seconds for Yes.*


When I click Yes here, the page displays:


*Attempting to log out of the following services:   *With a Red "X" next to
the Entity ID of Google SP.


Maybe this is expected behavior for the IDP properly killing the session
and I just did not know what to expect.





On Sat, May 14, 2022 at 2:34 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> Do you have some reason to think they support logout? I wouldn't have any
> reason for believing that, and certainly not bidirectionally.
>
> -- Scott
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220514/32fc79b9/attachment.htm>