<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hi!<div><br></div><div>Shibboleth SP 3.1.0.2 on Win64. </div><div>I'm trying to get the logout-flow working, but am failing on redirecting the user to my designated "You have been logged out"-url. The logout-chain is SAML2 and Local.</div><div dir="ltr"><br></div>shibboleth2.xml:</div><br>    <RequestMapper type="Native"><br>        <RequestMap applicationId="default"><br>            <Host name="<a href="http://mysite.com">mysite.com</a>" authType="shibboleth" requireSession="true"><br>                <Path name="LoggedOut" authType="shibboleth" requireSession="false"/><br>                <Path name="Scripts" authType="shibboleth" requireSession="false"/><br>                <Path name="Content" authType="shibboleth" requireSession="false"/><br>            </Host><br>        </RequestMap><br>    </RequestMapper></div><div dir="ltr">...<br>    <ApplicationDefaults entityID="<a href="https://mysite.com/Shibboleth.sso">https://mysite.com/Shibboleth.sso</a>"<br>        REMOTE_USER="eppn subject-id pairwise-id persistent-id"<br>        signing="false" encryption="false" attributePrefix="AJP_"></div><div dir="ltr">...</div><div dir="ltr">        <Sessions lifetime="28800" timeout="3600" checkAddress="false"<br>            handlerURL="/Shibboleth.sso" handlerSSL="true"<br>            exportLocation="<a href="https://mysite.com/Shibboleth.sso/GetAssertion">https://mysite.com/Shibboleth.sso/GetAssertion</a>" exportACL="127.0.0.1"<br>            idpHistory="false" idpHistoryDays="7" cookieProps="https" sameSiteFallback="true"><br>...<br>            <LogoutInitiator type="Chaining" Location="/Logout"></div><div dir="ltr"><div dir="ltr">                <LogoutInitiator type="SAML2" template="bindingTemplate.html"/><br>                <LogoutInitiator type="Local"/><br>            </LogoutInitiator></div><div dir="ltr">...</div><div dir="ltr"><br></div><div>Request-flow:</div><div><br></div><div>1. User is directed to this url: <a href="https://mysite.com/Shibboleth.sso/Logout?return=/LoggedOut">https://mysite.com/Shibboleth.sso/Logout?return=/LoggedOut</a><br></div>2. HTTP 302 to: <a href="http://myidp.com/Logout?SAMLRequest=XXX&RelayState=https%3A%2F%2Fmysite.com%2FLoggedOut">http://myidp.com/Logout?SAMLRequest=XXX&RelayState=https%3A%2F%2Fmysite.com%2FLoggedOut</a><br>3. IDP does its thing and HTTP302 with POST to: <br><a href="https://mysite.com/Shibboleth.sso/Logout?SAMLResponse=YYY&RelayState=https%3A%2F%2Fmysite.com%2FLoggedOut&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=hF%2B4PaMIpTql0UG2aFC3suO6V2yiUip4YaYsPUTf6i6VUo7TSWgt8lMNCECQFL2mhlAFnLimIYNSp2mmpMQzttl8V6OoMVhNa1NHkrqgFeBWLa61dJAigCXfYp19V55%2Fro4cg6OvED1IEpzcyDIBPqGL5%2FMRusu6nH4%2BeDGUxPw%3D">https://mysite.com/Shibboleth.sso/Logout?SAMLResponse=YYY&RelayState=https%3A%2F%2Fmysite.com%2FLoggedOut&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=hF%2B4PaMIpTql0UG2aFC3suO6V2yiUip4YaYsPUTf6i6VUo7TSWgt8lMNCECQFL2mhlAFnLimIYNSp2mmpMQzttl8V6OoMVhNa1NHkrqgFeBWLa61dJAigCXfYp19V55%2Fro4cg6OvED1IEpzcyDIBPqGL5%2FMRusu6nH4%2BeDGUxPw%3D</a></div><div dir="ltr"><br></div><div dir="ltr">with POST form data: InResponseTo=_fb463ec2375e7be0a6239908ee3e46e0&RelayState=https%3A%2F%2Fmysite.com%2FLoggedOut&DestinationUrl=https%3A%2F%2Fmysite.com%2FShibboleth.sso%2FLogout</div><div dir="ltr"><br></div><div>4. The above POST results in Shibboleth "Local Logout"-default page. I'm not redirected to my desired <a href="https://mysite.com/LoggedOut">https://mysite.com/LoggedOut</a>. </div><div><br></div><div>If I cange the LogoutInitiator to only Local, I am redirected correctly to my desired url. What am I missing in my setup?</div><div><br></div><div>Best regards, Erik</div><div dir="ltr"><br></div><div dir="ltr"><br></div><div dir="ltr"><div><br></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>