<div dir="ltr"><div>Hi Scott,</div><div><br></div><div>Thanks for your reply. I am trying your suggestion. Can you explain bit more on:</div><div><br></div><div><em>Another is to use the standard configuration on all of them, but add a<br> custom LogoutInitiator handler of type="Local" at some special location<br> and send the browser to do a local-only logout.</em></div><div><br></div><div>-Atul</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Nov 10, 2014 at 4:38 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span>On 11/10/14, 10:57 PM, "Atul Bhagwat" <<a href="mailto:atulabhagwat@gmail.com">atulabhagwat@gmail.com</a>> wrote:<br>
<br>
<br>
><br>
>I have tried it using Logout methods provided LOCAL and SAML2. I couldn't<br>
>figure out a way to make a particular SP as a main application.<br>
<br>
</span>Logout is between IdP and SP, not SP and SP. The IdP is brokering whatever<br>
happens after a logout is requested, and Shibboleth does not support that<br>
brokering anyway, so I don't see the relevance unless you're using some<br>
other software. Assuming that's the case...<br>
<br>
You can't use the routine configuration and support SAML logout inbound<br>
but prevent it from issuing logout requests outbound. Making it initiate<br>
local logout only but respond to SAML logout from another system would<br>
require elaborately configuring things using the old manual syntax for<br>
configuring handlers and endpoints.<br>
<br>
One option is to get rid of any logout endpoints in A's metadata, which<br>
will prevent the IdP from ever sending it a logout if B or C requests one.<br>
<br>
Another is to use the standard configuration on all of them, but add a<br>
custom LogoutInitiator handler of type="Local" at some special location<br>
and send the browser to do a local-only logout.<br>
<span class="HOEnZb"><font color="#888888"><br>
-- Scott<br>
<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><br>
</font></span></blockquote></div><br></div>