SingleLogout Service Google Apps for education

[Steve Herrera]

In the logs, it doesn't throw any errors. Here is what it shows:

2022-05-16 10:46:09,734 - INFO [Shibboleth-Audit.Logout:283] -
2022-05-16T15:46:09.734566Z||||
http://shibboleth.net/ns/profiles/logout||||sherrera|||||

2022-05-16 10:46:09,803 - INFO [Shibboleth-Audit.LogoutPropagation:283] -
2022-05-16T15:46:09.803312Z|||
google.com/a/REDACTED|http://shibboleth.net/ns/profiles/saml2/logout|https://REDACTED|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_fc7ca430632f77d31c314119f95706b9||||sherrera@REDACTED||

How do you recommend killing the session when the user hits logout? If
Google doesn't support SAML logout, what options should I pursue?

On Mon, May 16, 2022 at 7:08 AM Cantor, Scott <cantor.2 at osu.edu> wrote:

> On 5/14/22, 4:44 PM, "Steve Herrera" <sherrera at fsmail.bradley.edu> wrote:
>
> >    The reason I thought it would support it is because Google has a
> config requesting Sign-out Page URL.  I
> > pointed that to our IDP Logout page and it redirects it correctly there.
>
> That's not a SAML logout.
>
> >    Maybe this is expected behavior for the IDP properly killing the
> session and I just did not know what to
> > expect.
>
> Your logs will tell you exactly why it failed, and no, it didn't work.
>
> -- Scott
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20220516/00cee779/attachment.htm>