<div dir="ltr">We're upgrading our non-prod IdP to 2.4.0 in preparation of upgrading prod.<div><br></div><div>We've got SPs that are excited to use the SLO endpoints. We've added them to the idp metadata, the profile handlers to handler.xml, and the SLO request profile in relying-party.xml.</div>
<div><br></div><div>We're getting what looks to be a properly formatted logout request...</div><div><br></div><div><div><saml2p:LogoutRequest Destination="<a href="https://shib-idp-test.www.umich.edu/idp/profile/SAML2/POST/SSO">https://shib-idp-test.www.umich.edu/idp/profile/SAML2/POST/SSO</a>"</div>
<div> ID="pgjglaohdfjommabakcbjmigbbkmnblkiodfhoga"</div><div> IssueInstant="2014-04-23T20:02:14.377Z"</div><div> NotOnOrAfter="2014-04-23T20:07:14.377Z"</div><div> Reason="urn:oasis:names:tc:SAML:2.0:logout:user"</div>
<div> Version="2.0"</div><div> xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"></div><div>...<br></div></div><div></saml2p:LogoutRequest><br></div><div><br></div><div>...the IdP is returning an error. Nothing is revealed via the browser (no error message), but the log says</div>
<div><br></div><div><div>16:02:14.654 - 141.211.192.9 - ERROR [edu.internet2.middleware.shibboleth.common.profile.ProfileRequestDispatcherServlet:88] - Error occurred while processing request</div><div>java.lang.ClassCastException: org.opensaml.saml2.core.impl.LogoutRequestImpl cannot be cast to org.opensaml.saml2.core.AuthnRequest</div>
</div><div><br></div><div>I googled the error message and didn't see anything. Suggestions?</div><div><br></div><div>Liam</div></div>