Logging out of an OIDC RP only shows the clientID instead of the name on the logout page

[Martin Hitschel]

Hi Max,

to have a readable client name, you should use SAML metadata XML format 
for OIDC instead of JSON, see here 
https://shibboleth.atlassian.net/wiki/spaces/SC/pages/1912406916/OAuthRPMetadataProfile

Having this, you can then introduce mdui:UIInfo tags in "SP" metadate, 
like used in federations, e.g. here https://doku.tid.dfn.de/de:metadata

Regards

Martin


Am 28.10.26 um 06:44 schrieb Max Nuding via users:
> Hi Scott,
>
> I forgot to mention: idp.logout.elaboration is set to true! (and works 
> for SAML based SPs).
> I don't see how "display a readable client name instead of a 
> meaningless client ID" is confusing. I'm not talking about hiding the 
> X, I want tom ake it clearer which service they're logging out from.
>
> Best
> Max
>
> On 27/10/2026 15:35, Scott Cantor via users wrote:
>> Notably, idp.logout.elaboration defaults to false due to the fact 
>> that accessibility requires hiding the UI for logout, so it isn't set 
>> to incur the cost unless people just want to run a non-accessible UI.
>>
>> Not to mention, all you're doing is confusing the user, and the red 
>> X's are never going away. So it makes reporting the status kind of 
>> silly to me.
>>
>> Anyway, that's why I added the flag and defaulted it off to skip all 
>> the extra work, and unless it's changed, that would be the reason you 
>> won't see anything but the raw IDs.
>>
>> -- Scott
>>
>
>
-- 

*Dr. MARTIN HITSCHEL | SYSTEM ENGINEER*

+49 7071 407109-0
martin.hitschel at daasi.de

*DAASI International GmbH*
Europaplatz 3
72072 Tübingen, Germany
www.daasi.de

CEOs: David Hübner, Markus Widmer
Registered Office: Tübingen
Commercial Register: Amtsgericht Stuttgart, HRB 382175
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20261028/1b339d96/attachment.htm>