<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Hi Scott,<br>
<br>
thanks a lot for your hints.<br>
<br>
On 16.07.2020 19:35, Cantor, Scott wrote:<br>
</div>
<blockquote type="cite"
cite="mid:67105E52-CDBD-4014-8ADF-13B69F1185B3@osu.edu">
<blockquote type="cite">
<pre wrap="">SLO never being practical anyway notwithstanding, most issues amount to NameID mismatches between the
LogoutRequest and the original Assertion, so that's missing the core comparison you need to debug via the log.
</pre>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
<p>I did that, her's the output. I'm not an expert, but it looks to
me like there is no mismatch between in the NameID in the original
assertion and the NameID in the LogoutRequest. So there is a
problem with the StorageService of the IdP? I switched it to
Client side Browser cookies - it makes no difference, i still get
'SessionNotFound' errors?<br>
</p>
<p><br>
</p>
<p>Snippet from original assertion:</p>
<p>
<style type="text/css">p { margin-bottom: 0.25cm; line-height: 115%; }a:link { }</style>
</p>
<p style="margin-bottom: 0cm; line-height: 100%"><saml2:NameID</p>
<p style="margin-bottom: 0cm; line-height: 100%">
Format="urn:oasis:names:tc:SAML:2.0:nameid-format:persistent"</p>
<p style="margin-bottom: 0cm; line-height: 100%">
NameQualifier=<a class="moz-txt-link-rfc2396E" href="https://login.bbaw.de/idp/shibboleth">"https://login.bbaw.de/idp/shibboleth"</a></p>
<p style="margin-bottom: 0cm; line-height: 100%">
SPNameQualifier=<a class="moz-txt-link-rfc2396E" href="https://nubes.bbaw.de/apps/user_saml/saml/metadata">"https://nubes.bbaw.de/apps/user_saml/saml/metadata"</a>
xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">QJYMXBYIIYQAGZOZ6GG2BAG6RSXSCJAV</saml2:NameID></p>
<p style="margin-bottom: 0cm; line-height: 100%"><br>
</p>
<p style="margin-bottom: 0cm; line-height: 100%">Snippet 1 from
idp-warn.log:</p>
<p style="margin-bottom: 0cm; line-height: 100%"> </p>
<p style="margin-bottom: 0cm; line-height: 100%">2020-07-17
17:50:30,916 - xxx.xxx.xxx.xxx - WARN
[org.opensaml.saml.common.profile.logic.MetadataNameIdentifierFormatStrategy:74]
- Ignoring NameIDFormat metadata that includes the 'unspecified'
format</p>
<p style="margin-bottom: 0cm; line-height: 100%"><br>
</p>
<p style="margin-bottom: 0cm; line-height: 100%">Snippet from
LogoutRequest:</p>
<p style="margin-bottom: 0cm; line-height: 100%">
<style type="text/css">p { margin-bottom: 0.25cm; line-height: 115%; }a:link { }</style>
</p>
<p style="margin-bottom: 0cm; line-height: 100%"><samlp:LogoutRequest</p>
<p style="margin-bottom: 0cm; line-height: 100%">
Destination=<a class="moz-txt-link-rfc2396E" href="https://my.idp.test/idp/profile/SAML2/Redirect/SLO">"https://my.idp.test/idp/profile/SAML2/Redirect/SLO"</a></p>
<p style="margin-bottom: 0cm; line-height: 100%">
ID="ONELOGIN_94ecab58dc3fafa70f7d2baa9ad228b410c857af"</p>
<p style="margin-bottom: 0cm; line-height: 100%">
IssueInstant="2020-07-17T15:55:34Z" Version="2.0"</p>
<p style="margin-bottom: 0cm; line-height: 100%">
xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<saml:Issuer><a class="moz-txt-link-freetext" href="https://my.sp.test/apps/user_saml/saml/metadata">https://my.sp.test/apps/user_saml/saml/metadata</a></saml:Issuer></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<saml:NameID>QJYMXBYIIYQAGZOZ6GG2BAG6RSXSCJAV</saml:NameID></p>
<p style="margin-bottom: 0cm; line-height: 100%">
<samlp:SessionIndex>_76e2634663397d200cd25430a40f3810</samlp:SessionIndex></p>
<p style="margin-bottom: 0cm; line-height: 100%"></samlp:LogoutRequest></p>
<p style="margin-bottom: 0cm; line-height: 100%"><br>
</p>
<p style="margin-bottom: 0cm; line-height: 100%">Snippet 2 from
idp-warn.log:</p>
<p style="margin-bottom: 0cm; line-height: 100%">
<style type="text/css">p { margin-bottom: 0.25cm; line-height: 115%; }a:link { }</style>
</p>
<p style="margin-bottom: 0cm; line-height: 100%">2020-07-17
17:55:35,088 - xxx.xxx.xxx.xxx - WARN
[org.opensaml.profile.action.impl.LogEvent:105] - A non-proceed
event
occurred while processing the request: SessionNotFound</p>
<p style="margin-bottom: 0cm; line-height: 100%"><br>
</p>
<p style="margin-bottom: 0cm; line-height: 100%">Best regards,</p>
<p style="margin-bottom: 0cm; line-height: 100%">Kai<br>
</p>
</body>
</html>