<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
Hey Guys,<br><br><div>We are currently working with one of our customer in a single IDP / multiple Sp environment. Every thing works fine expect during the single signout and when there is an specific Sp in picture we are receiving xmltooling - malformed url exception.</div><div>Here is the saml success response from IDP, after signing out from the other SP. And this response causing malformed URL exception in the UI, we are shibboleth 2.4.3 and the other sp is also shibboleth not sure which version though:</div><div><br></div><div>https://sso.nbclearn.com/Shibboleth.sso/SLO/Redirect?SAMLResponse=fZFPa8MwDMXv%2FRTB98Z%2F4iaNSQJjvRQ6Bk3pYZfh2MoaSO0S2bB9%2B2UZZezSk0B6vyfxVB38h4%2FhCHjzDiHZAYbB6TB4V5NLCDdUlCL61HVmBD251PgrbS9D1%2FkRwiWdZ7Q9vNIj2GECE0iy39XkXcpMll3PBc9tngvJuYFCi7yQZisy2W1ND7PU3Ref%2FAxpK%2FMcsqzXWQHcQmklK3vWMygKttE%2FAGKEvcOgXaiJYFysGV9zcRJCiVLJzRtJzjDhcr5IGUk%2Br6PDmsTJKa9xQOX0FVAFo9qnl4OaNeo2%2BeCNH0lTOeRq2TH9gmpuPIY1Ikw%2FcZFmienLgIOQgo0V%2FXNrqjboEPFen72F5KzHCI%2FdcVGrNhoDiIQ2Fb0b0f%2Bfa1arbw%3D%3D&RelayState=a7ff67b2fd48ae9a39fc9dec9fd9dc11fe185e2c&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=BzAOB3h%2BTgrqPP80v7wgDEhHDqzErriTELd3yn%2FP8nEPqSWSaBNd0KWzgEVH6y6pc6oSM%2BnzeT8a61puJkXGmap7kXdKd5bj%2BKx2Pdjtv2rSWN7N%2BCN2CqWYzG3cmcG2BS53iYKkXgq7SSkWmoHAcK5DpKQGUaM76RYOA1r19Ng%3D</div><div><br></div><div>There is another SP ( simplesaml) which works perfectly in the same scenario, and here is the success response from IDP :</div><div><br></div><div>https://sso.nbclearn.com/Shibboleth.sso/SLO/Redirect?SAMLResponse=nZJNa8MwDIbv%2FRXB98aJ3TSrSQJjvRQ6NprSwy7DH8oaSO1iObD9%2B3kpXdmlh51sy%2B%2FzSkiqtu7DjWEHeHYWIVkDht7K0Dtbk2MIZxSUIrrUKj2A9DbV7kTbY6%2BUGyAc0%2FhH2%2B0L3YHpPehAks26Ju%2B5ZIYbzrtOdkttFpmSZSZXRvNltjQs48ViFaX2mnjvImR4yQsNhSq5KpUuGRRGKvagme5KrUwEEEfYWAzShpqwLGfzLJ%2FnbM%2BY4AvB8zeSHMDjVD5LM5J8ngaLNRm9FU5ij8LKE6AIWrSPz1sRNeLsXXDaDaSpLOZiyuEvoIiB%2B7BEBP%2FTLtJMbfrSYCGkYMaK3tyaqg0yjHg9n5yB5CCHEe6746QW7ag1IJJ%2F4q8yViiHy6gJbSp6s%2Fl9xMvfXWhms28%3D&SigAlg=http%3A%2F%2Fwww.w3.org%2F2000%2F09%2Fxmldsig%23rsa-sha1&Signature=AXD1CGh5OJk1JwmyVUOFgDs1EzN65x%2BPu7psysY0B6FY%2B%2FA4MejRqzeEpSNO1Mj%2BA159Z1Cg2XNajFRPKGHDsZdtT506%2F%2Bn43FfGFFUvFAcmPM%2Bo1um0K%2B27iuHi96PQ%2BCjblRLu3C4pQ4wKQ1MW7ElThKtTuSYsvlDO6cg4vBg%3D</div><div><br></div><div>Log didn't suggest much except one line "malformed url " after the saml response. Could you please suggest ?</div><div><br></div><div>Thanks,</div><div>Sanjay</div><div><br></div><div><br></div><div> </div>                                            </div></body>
</html>