Logging out of an OIDC RP only shows the clientID instead of the name on the logout page

Scott Cantor scott at restingparrotsoftware.com
Wed Oct 28 10:03:10 UTC 2026



> On Oct 28, 2026, at 1:44 AM, Max Nuding via users <users at shibboleth.net> wrote:
> 
> I forgot to mention: idp.logout.elaboration is set to true! (and works for SAML based SPs).

Worth asking.

> I don't see how "display a readable client name instead of a meaningless client ID" is confusing. I'm not talking about hiding the X, I want tom ake it clearer which service they're logging out from.

I was referring to the other part of the UI, though for myself I didn't care to depend on external input into the UI so I never wanted to show that sort of thing either. Having a consistent UI that didn't depend on the originating service seemed best to me.

I don't know if it's a requirement or not to use SAML metadata for the UI. I thought we had the interfaces emulated under the covers based on OpenID client information but Henri would know for sure if that's supposed to work.

-- Scott



More information about the users mailing list