Logging out of an OIDC RP only shows the clientID instead of the name on the logout page

[Max Nuding]

Hi Scott,

I forgot to mention: idp.logout.elaboration is set to true! (and works 
for SAML based SPs).
I don't see how "display a readable client name instead of a meaningless 
client ID" is confusing. I'm not talking about hiding the X, I want tom 
ake it clearer which service they're logging out from.

Best
Max

On 27/10/2026 15:35, Scott Cantor via users wrote:
> Notably, idp.logout.elaboration defaults to false due to the fact that accessibility requires hiding the UI for logout, so it isn't set to incur the cost unless people just want to run a non-accessible UI.
> 
> Not to mention, all you're doing is confusing the user, and the red X's are never going away. So it makes reporting the status kind of silly to me.
> 
> Anyway, that's why I added the flag and defaulted it off to skip all the extra work, and unless it's changed, that would be the reason you won't see anything but the raw IDs.
> 
> -- Scott
> 

-- 
Herr Max Nuding
Sachgebiet Identity und Access Management, Sachgebiet Softwareentwicklung
Abt. IT-Dienste für Forschung, Lehre und Infrastruktur
Kommunikations-, Informations-, Medienzentrum (KIM)
Universität Konstanz
78467 Konstanz
Tel: +49.7531.88-4658
Raum: B707

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5056 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://shibboleth.net/pipermail/users/attachments/20261028/e5c14cef/attachment.p7s>