<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#094163">Hello,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#094163"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#094163">We are using Shibboleth service as SP and a external source as IDP for one of our application. Everything works fine except the logout.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#094163">The logout works fine if the user logs out within 30 seconds of login. If it is with in 30 seconds, we can see SLO is being initiated to IDP and IDP is clearing IDP cookie.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#094163">But, if user logs out after 30 seconds, our shib is not intiating SLO and the IDP cookie is not getting cleared.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#094163"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#094163">We don’t see much in the shibd logs. All we see is below.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#094163"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><i><u><span style="color:#094163">Within 30 seconds:<o:p></o:p></span></u></i></b></p>
<p class="MsoNormal"><span style="color:#094163">DEBUG Shibboleth.Listener [73] [default]: dispatching message (default/Logout::run::</span><b><span style="color:#00B050">SAML2LI</span></b><span style="color:#094163">)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#094163"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><i><u><span style="color:#094163">After 30 seconds:<o:p></o:p></span></u></i></b></p>
<p class="MsoNormal"><span style="color:#094163">DEBUG Shibboleth.Listener [73] [default]: dispatching message (default/Logout::run::</span><b><span style="color:red">LocalLI</span></b><span style="color:#094163">)<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#094163"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#094163">Can anyone throw some light on how to resolve this issue?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#094163"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#094163">Thanks<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#094163">Madan</span><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>