<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-GB" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi Scott and the Shibboleth team,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I’m a developer of an application which also acts as a SP of its own. So my code needs to work with the Shibboleth IdP v3.1.1 using the ComponentSpace SAML library. Because we’re the SP side and have no control on the IdP’s configuration,
we hope our code can at least work with the default configuration of the IdP in our dev and testing environment.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We managed to get the login part working properly and get the IdP responding to the LogoutRequest thanks to Scott’s help yesterday. However the IdP response on the LogoutRequest always returns An error occurred which is exactly same as
David described in his email <a href="http://shibboleth.1660669.n2.nabble.com/Logout-SAML-Error-message-v3-td7610948.html">
http://shibboleth.1660669.n2.nabble.com/Logout-SAML-Error-message-v3-td7610948.html</a>. David wanted to get more error details returned in the IdP response as expressed in his issue ticket
<a href="https://issues.shibboleth.net/jira/browse/IDP-576">https://issues.shibboleth.net/jira/browse/IDP-576</a>, however I’m more interested in what exactly causes the error and how to fix it. All I want is that the Shibboleth IdP can destroy the cookie shib_idp_session
and shib_idp_session_ss on the client side, or at least invalidate the session id held in the cookie in IdP’s memory. Are there any built-in way or some property switches to achieve it? Do we have to customize IdP’s workflow or ask the users to close down
the browser?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Please advise. Thank you very much in advance.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Kind regards,<o:p></o:p></p>
<p class="MsoNormal">Wayne Si <o:p></o:p></p>
</div>
</body>
</html>