SLO not working after upgrade to IdP v5

[Cantor, Scott]

I'm inclined to suspect a bug based on a cursory search of the sources. The reference to " shibboleth.CriteriaRelyingPartyConfigurationResolver" that it says isn't there is indeed not there, so something probably got changed in 5.0 and didn't get adjusted.

A SOAP logout only runs when there's no front-channel endpoint to use (or when the logout to the IdP itself was over SOAP). That just isn't useful, so it doesn't happen much (as evidenced by it being a year since the release with nobody noticing).

If the result internally is that just that logout propagation fails, and the rest of the IdP is still happy, you're honestly just seeing noise. A SOAP logout almost certainly wouldn't have worked anyway.

Anyway, I'd file a bug.

-- Scott