How to disable Logout propagation

[Mohamed Lrhazi]

Thanks Scott. makes sense.

If the user does not select local or global logout options, the default is
global. Can we change that to be local by default?

Also, I noticed a mention of *idp.logout.propagationHidden* in the wiki...
I tried to set it to true but does not seem to have hidden the propagation
information during logout.

idp.logout.propagationHidden=shibboleth.Conditions.TRUE


Thanks,
Mohamed.


On Mon, Mar 6, 2023 at 12:03 PM Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Is there a way to disable logout propagation in shibboleth IdP?
>
> Primarily correcting metadata for SPs to indicate a lack of support for
> it, but also by adjusting the templates to route things directly around
> that step and  direct it explicitly not to propagate by signaling that
> choice in the initial view.
>
> Disabling the logout profile will do it also but with more overhead and it
> would prevent inbound logout as well.
>
> I don't personally see why this is a good idea. A few SPs do support
> logout and they shouldn't be penalized for doing that.
>
> -- Scott
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230306/eb9103f4/attachment.htm>