[IDP 4.2.1] Logout only from SPs -- Creating a new endpoint ?

[ADRIEN SOLA]

Hello everyone,

I hope this mail finds you well.
I encountered an issue regarding a new Shibboleth endpoint for one of my project. I am looking for answers or directions on the subject.

I am running an instance of Shibboleth IDP 4 and trying to create a new endpoint (other than the default “Logout” one) in order to logout from the SPs only and not the IDP.

I tried creating it in the JAVA code similar to the default Logout. I wrote in the necessary flows, configured my custom logout in all the IDP necessary files.

However, when I try to call the my custom endpoint, the IDP did not find it. It seems like it can’t reach the new endpoint in the JAVA.
In addition, I tried to call only the LogoutPropagationFlow as another solution, but this wasn’t successful either.

Finally, calling the logout-propagate.vm directly instead of the logout.vm isn’t working either but I might not be using logout-propagate.vm properly.

I am looking for advices and am opened to answer any additional questions you might have on the matter. Your answers might give me a new hope.

Many thanks,

Adrien Sola

Ce message et toutes les pièces jointes (ci-après le "message") sont établis à l’intention exclusive des destinataires désignés. Il contient des informations confidentielles et pouvant être protégé par le secret professionnel. Si vous recevez ce message par erreur, merci d'en avertir immédiatement l'expéditeur et de détruire le message. Toute utilisation de ce message non conforme à sa destination, toute diffusion ou toute publication, totale ou partielle, est interdite, sauf autorisation expresse de l’émetteur. L'internet ne garantissant pas l'intégrité de ce message lors de son acheminement, Atos (et ses filiales) décline(nt) toute responsabilité au titre de son contenu. Bien que ce message ait fait l’objet d’un traitement anti-virus lors de son envoi, l’émetteur ne peut garantir l’absence totale de logiciels malveillants dans son contenu et ne pourrait être tenu pour responsable des dommages engendrés par la transmission de l’un d’eux.

This message and any attachments (the "message") are intended solely for the addressee(s). It contains confidential information, that may be privileged. If you receive this message in error, please notify the sender immediately and delete the message. Any use of the message in violation of its purpose, any dissemination or disclosure, either wholly or partially is strictly prohibited, unless it has been explicitly authorized by the sender. As its integrity cannot be secured on the internet, Atos and its subsidiaries decline any liability for the content of this message. Although the sender endeavors to maintain a computer virus-free network, the sender does not warrant that this transmission is virus-free and will not be liable for any damages resulting from any virus transmitted.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230914/7b3bd7da/attachment.htm>