<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>Hi,</p>
<p>i have a problem with single logout on my IdP v.3.4.6 . SLO works
with some sites, with others no more. It makes no difference if i
use client side (browser) cookies or server side database as
storage service for the session data. The logfiles complain about
NameIDFormat 'unspecified' being used. Is there anything i can do
to fix this on the IdP side or is it a SP configuration problem?</p>
<p><br>
</p>
<p>
<style type="text/css">pre.cjk { font-family: "Courier New",monospace; }p { margin-bottom: 0.25cm; line-height: 115%; }a:link { }</style>
</p>
<pre class="western">Snippet from idp-warn.log</pre>
<p style="margin-bottom: 0cm; line-height: 100%">2020-07-15
18:32:52,661 - xxx.xxx.xxx.xxx - WARN
[org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:74]
- Ignoring NameIDFormat metadata that includes the 'unspecified'
format</p>
<p style="margin-bottom: 0cm; line-height: 100%">2020-07-15
18:33:20,432 - xxx.xxx.xxx.xxx - WARN
[org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed
event
occurred while processing the request: SessionNotFound</p>
<p style="margin-bottom: 0cm; line-height: 100%"><br>
</p>
<pre style="margin-bottom: 0cm; line-height: 100%">Snippet from metadata/idp-metadata.xml</pre>
<p style="margin-bottom: 0cm; line-height: 100%"> </p>
<p style="margin-bottom: 0cm; line-height: 100%"><NameIDFormat>urn:mace:shibboleth:1.0:nameIdentifier</NameIDFormat></p>
<p style="margin-bottom: 0cm; line-height: 100%"><NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</NameIDFormat></p>
<p style="margin-bottom: 0cm; line-height: 100%"><NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat></p>
<p style="margin-bottom: 0cm; line-height: 100%"><br>
</p>
<p style="margin-bottom: 0cm; font-variant: normal; letter-spacing:
normal; font-style: normal; font-weight: normal; line-height:
100%">
<font color="#000000"><font face="Verdana, Geneva, Helvetica,
Arial, sans-serif"><font style="font-size: 9pt" size="2">It
makes no difference if i use client side cookies or server side
database for session data:</font></font></font></p>
<p style="margin-bottom: 0cm; font-variant: normal; letter-spacing:
normal; font-style: normal; font-weight: normal; line-height:
100%">
<font color="#000000"><font style="font-size: 9pt">idp.session.StorageService
= shibboleth.JPAStorageService</font></font></p>
<p>
</p>
<p style="margin-bottom: 0cm; font-variant: normal; letter-spacing:
normal; font-style: normal; font-weight: normal; line-height:
100%"><font color="#000000"><font style="font-size: 9pt">idp.session.StorageService
= shibboleth.ClientSessionStorageService</font></font></p>
<p style="margin-bottom: 0cm; font-variant: normal; letter-spacing:
normal; font-style: normal; font-weight: normal; line-height:
100%"><font color="#000000"><font style="font-size: 9pt"><br>
</font></font></p>
<p style="margin-bottom: 0cm; line-height: 100%"> </p>
<pre class="western">Snippet from idp-process.log</pre>
<p style="margin-bottom: 0cm; line-height: 100%">
</p>
<p style="margin-bottom: 0cm; line-height: 100%">2020-07-15
18:32:53,077 - INFO [Shibboleth-Audit.SSO:275] -
IP:xxx.xxx.xxx.xxx -
20200715T163253Z|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect|ONELOGIN_df9832c4c8f4ee1428ae91cfabd09aeb8b60ff09|<a class="moz-txt-link-freetext" href="https://my.service.test/apps/user_saml/saml/metadata|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://my.idp.test/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_8ef5ac95bdf1707defc30c7d46d5b56e|zimmer|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport">https://my.service.test/apps/user_saml/saml/metadata|http://shibboleth.net/ns/profiles/saml2/sso/browser|https://my.idp.test/idp/shibboleth|urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST|_8ef5ac95bdf1707defc30c7d46d5b56e|zimmer|urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport</a></p>
<p style="margin-bottom: 0cm; line-height: 100%">|eduPersonEntitlement,uid,mail,eduPersonScopedAffiliation,displayName,quota,eduPersonPrincipalName|QJYMXBYIIYQAGZOZ6GG2BAG6RSXSCJAV|_1c23274b03025dcead4cfec5cf71e152|true</p>
<p style="margin-bottom: 0cm; line-height: 100%"><br>
</p>
<pre class="western">LogoutRequest (SP)</pre>
<p style="margin-bottom: 0cm; line-height: 100%">
<br>
</p>
<p style="margin-bottom: 0cm; line-height: 100%">2020-07-15
18:33:20,124 - DEBUG [PROTOCOL_MESSAGE:127] - IP:xxx.xxx.xxx.xxx -
</p>
<p style="margin-bottom: 0cm; line-height: 100%"><?xml
version="1.0" encoding="UTF-8"?></p>
<p style="margin-bottom: 0cm; line-height: 100%"><samlp:LogoutRequest</p>
<p style="margin-bottom: 0cm; line-height: 100%">
Destination=<a class="moz-txt-link-rfc2396E" href="https://my.idp.test/idp/profile/SAML2/Redirect/SLO">"https://my.idp.test/idp/profile/SAML2/Redirect/SLO"</a></p>
<p style="margin-bottom: 0cm; line-height: 100%">
ID="ONELOGIN_01bcd37da6697d511f195a14526da06f46c48ced"</p>
<p style="margin-bottom: 0cm; line-height: 100%">
IssueInstant="2020-07-15T16:33:19Z" Version="2.0"</p>
<p style="margin-bottom: 0cm; line-height: 100%">
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<saml:Issuer><a class="moz-txt-link-freetext" href="https://my.service.test/apps/user_saml/saml/metadata">https://my.service.test/apps/user_saml/saml/metadata</a></saml:Issuer></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<saml:NameID>QJYMXBYIIYQAGZOZ6GG2BAG6RSXSCJAV</saml:NameID></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<samlp:SessionIndex>_8fcd999f1db12afe8a88e821cb32b54b</samlp:SessionIndex></p>
<p style="margin-bottom: 0cm; line-height: 100%"></samlp:LogoutRequest></p>
<br>
<pre class="western">LogoutResponse (IDP)</pre>
<p style="margin-bottom: 0cm; line-height: 100%">
<br>
</p>
<p style="margin-bottom: 0cm; line-height: 100%">2020-07-15
18:33:20,530 - DEBUG [PROTOCOL_MESSAGE:70] - IP:xxx.xxx.xxx.xxx -
</p>
<p style="margin-bottom: 0cm; line-height: 100%"><?xml
version="1.0" encoding="UTF-8"?></p>
<p style="margin-bottom: 0cm; line-height: 100%"><saml2p:LogoutResponse</p>
<p style="margin-bottom: 0cm; line-height: 100%">
Destination=<a class="moz-txt-link-rfc2396E" href="https://my.service.test/apps/user_saml/saml/sls">"https://my.service.test/apps/user_saml/saml/sls"</a></p>
<p style="margin-bottom: 0cm; line-height: 100%">
ID="_d83a4fa15c02b1a1a57bebef0cfc5094"</p>
<p style="margin-bottom: 0cm; line-height: 100%">
InResponseTo="ONELOGIN_01bcd37da6697d511f195a14526da06f46c48ced"</p>
<p style="margin-bottom: 0cm; line-height: 100%">
IssueInstant="2020-07-15T16:33:20.439Z" Version="2.0"
xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"></p>
<p style="margin-bottom: 0cm; line-height: 100%"> <saml2:Issuer
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"><a class="moz-txt-link-freetext" href="https://my.idp.test/idp/shibboleth">https://my.idp.test/idp/shibboleth</a></saml2:Issuer></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<saml2p:Status></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:Requester"></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<saml2p:StatusCode
Value="urn:oasis:names:tc:SAML:2.0:status:UnknownPrincipal"/></p>
<p style="margin-bottom: 0cm; line-height: 100%">
</saml2p:StatusCode></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<saml2p:StatusMessage>An error
occurred.</saml2p:StatusMessage></p>
<p style="margin-bottom: 0cm; line-height: 100%">
</saml2p:Status></p>
<p style="margin-bottom: 0cm; line-height: 100%"></saml2p:LogoutResponse></p>
<p style="margin-bottom: 0cm; line-height: 100%"><br>
</p>
<p style="margin-bottom: 0cm; line-height: 100%">Best regards,</p>
<p style="margin-bottom: 0cm; line-height: 100%">Kai<br>
</p>
</body>
</html>