Shibboleth OIDCmodule - end session endpint

Cantor, Scott cantor.2 at
Thu Nov 24 17:44:38 UTC 2022

The plugin has no logout support. There are others working on it that we will eventually incorporate work from if it's consistent with the IdP's existing logout machinery.

>    Is there a good reason why it does not other than the reasons listed
> about SAML logout?

The browser vendors could make logout work with a one-page RFC. They saw fit to break the web over SameSite, but can't be bothered to do the same thing and just add an "auth" property to cookies.

-- Scott

More information about the users mailing list