Logging out of an OIDC RP only shows the clientID instead of the name on the logout page
Scott Cantor
scott at restingparrotsoftware.com
Wed Oct 28 10:03:10 UTC 2026
> On Oct 28, 2026, at 1:44 AM, Max Nuding via users <users at shibboleth.net> wrote:
>
> I forgot to mention: idp.logout.elaboration is set to true! (and works for SAML based SPs).
Worth asking.
> I don't see how "display a readable client name instead of a meaningless client ID" is confusing. I'm not talking about hiding the X, I want tom ake it clearer which service they're logging out from.
I was referring to the other part of the UI, though for myself I didn't care to depend on external input into the UI so I never wanted to show that sort of thing either. Having a consistent UI that didn't depend on the originating service seemed best to me.
I don't know if it's a requirement or not to use SAML metadata for the UI. I thought we had the interfaces emulated under the covers based on OpenID client information but Henri would know for sure if that's supposed to work.
-- Scott
More information about the users
mailing list