SAML Logout from Office 365

[Petr Hroudný]

Hello,

during Shibboleth 4 IdP integration with Office 365 we've run into strange
problem with SAML Logout:

- in Firefox, it works fine, but only when shibboleth.StorageService is
used. With shibboleth.ClientSessionStorageService (htmlLocalStorage
enabled), IdP is not able to access ClientSession storage so it's unable to
find SP session.

- in Chrome, Safari etc, browser refuses to include JSESSIONID cookie in
logout requests to IdP, so the whole SAML Logout breaks at execution=e1s1

SAML Logout works fine here for other sites, so there must be something
special with Office 365, which prevents Shibboleth's access to Client
Storage in Firefox and prevents other browsers from sending necessary
cookies to IdP.

Any ideas what can be the reason?

Thanks, Petr
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240524/0093dc60/attachment.htm>