<div dir="ltr">Think i have it working now, i created a new logout with only local logout and use return as the same url. That seems to work.<br><br><LogoutInitiator type="Chaining"<br> Location="/LogoutLocal"<br> relayState="cookie"><br> <LogoutInitiator type="Local"/><br></LogoutInitiator><div><br>And url <a href="http://domain.com/Shibboleth.sso/LogoutLocal?return=http://domain.com/highsecurity">http://domain.com/Shibboleth.sso/LogoutLocal?return=http://domain.com/highsecurity</a></div><div><br><div class="gmail_quote"><div dir="ltr">On Mon, Jun 1, 2015 at 11:15 AM Peter Schober <<a href="mailto:peter.schober@univie.ac.at" target="_blank">peter.schober@univie.ac.at</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">* Idar Borlaug <<a href="mailto:idar.borlaug@gmail.com" target="_blank">idar.borlaug@gmail.com</a>> [2015-06-01 11:05]:<br>
> will redirecting to this url work, if its logged in with the wrong level?<br>
> <a href="https://yoursite.com/Shibboleth.sso/Logout?return=https://yoursite.com/highsecurity" target="_blank">https://yoursite.com/Shibboleth.sso/Logout?return=https://yoursite.com/highsecurity</a><br>
<br>
If the question now is How do I end a subject's browser's session with<br>
this SAML SP, then yes, that's one way to do it, but depending on your<br>
SP configuration and the subject's IDP deployment this could also<br>
trigger logout at the SAML IDP.<br>
-peter<br>
--<br>
To unsubscribe from this list send an email to <a href="mailto:users-unsubscribe@shibboleth.net" target="_blank">users-unsubscribe@shibboleth.net</a><br>
</blockquote></div></div></div><div dir="ltr">-- <br></div><div dir="ltr">Idar Borlaug<div><br></div></div>