Query on shibboleth

[vamsi krishna yenduri]

Hi Team,

In my application logout url is https://xyz.abc.com/Shibboleth.sso/Logout but
when anyone suffix any url after logout
https://xyz.abc.com/Shibboleth.sso/Logout?return=https://evil.com
<https://webapps.bmc.com/Shibboleth.sso/Logout?return=https://evil.com> it
redirects to the suffix page. In this case it is https://evil.com. How we
can suppress redirects into my application url.

Thanks
Vamsi Krishna
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240924/ddec7790/attachment.htm>