<div dir="ltr"><div dir="ltr" class="gmail_attr">st 11. 8. 2021 o 21:31 Cantor, Scott <<a href="mailto:cantor.2@osu.edu">cantor.2@osu.edu</a>> napísal(a):<br></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">The only obvious dfference I can think of is the addition of SOAP support, which until 4.1 often hijacks the outbound logout step, but in that case there is zero chance that logout would actually be working, counter to your original post.<br>
<br></blockquote><div><br></div><div>SAML tracer shows outbound logout flow is the same in both versions:</div><div> - IdP sends LogoutRequest to SP's /Shibboleth.sso/SLO/Redirect endpoint <br></div><div>- IdP receives appropriate LogoutResponse with status Success on <span class="gmail-hljs-string">/idp/profile/SAML2/Redirect/SLO </span><span class="gmail-hljs-string">endpoint</span><span class="gmail-hljs-string">.</span><b><span class="gmail-hljs-string"><br></span></b></div><div><b><span class="gmail-hljs-string"><br></span></b></div><div><span class="gmail-hljs-string">idp-process.log contains:</span></div><div><span class="gmail-hljs-string"><br></span></div><div><span class="gmail-hljs-string">INFO [Shibboleth-Audit.Logout:283] - x.x.x.x|2021-08-11T16:54:56.273633Z|2021-08-11T16:54:56.</span><span class="gmail-hljs-string">292906Z||<a href="https://example.org/shibboleth%7C%7C%7C%7C%7C%7C%7C%7Ctrue%7C%7CRedirect%7C%7C%7CSuccess%7C%7C%7CMozilla/5.0" target="_blank">https://example.org/shibboleth||||||||true||Redirect|||Success|||Mozilla/5.0</a> (Macint<br>osh; Intel Mac OS X 10.13; rv:90.0) Gecko/20100101 Firefox/90.0</span></div><div><span class="gmail-hljs-string"><br></span></div><div><span class="gmail-hljs-string">so the LogoutResponse has probably been correctly received and recognised by the IdP.</span></div><div><span class="gmail-hljs-string"><br></span></div><div><span class="gmail-hljs-string">That would mean, that only the logout status webpage is for some reason unable to fetch correct status and always prints red X.</span></div><div><span class="gmail-hljs-string"><br></span></div><div><span class="gmail-hljs-string">Thanks, Petr<br></span></div><div><b><span class="gmail-hljs-string"></span></b></div><div><b><span class="gmail-hljs-string"><br></span></b></div><div><br></div><div><br></div><div> <br></div></div></div>