<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof"><span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">Hello,</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">I'm trying to configure SAML global logout for an app, but it seems that only the local logout is processed. The
IDP supports single logout. Shibboleth SP is configured to process SAML2 and then Local profile. Here are the logs I gett from shibd when I call the default /Logout trigger from the browser:</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">----------</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">2024-03-07 11:07:10 DEBUG Shibboleth.Listener [2] [default]: dispatching message (default/Logout::run::SAML2LI)<br>
2024-03-07 11:07:10 DEBUG Shibboleth.SessionCache [2] [default]: searching for session (_7f79791acabb4b344b968d9d303adda2)<br>
2024-03-07 11:07:10 DEBUG Shibboleth.Listener [2] [default]: dispatching message (default/Logout::run::LocalLI)<br>
2024-03-07 11:07:10 DEBUG Shibboleth.SessionCache [2] [default]: searching for session (_7f79791acabb4b344b968d9d303adda2)</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">----------</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
Here are the bindings for the logout in the IDP metadata:<br>
<br>
----------</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: monospace; font-size: 13px; color: rgb(0, 0, 0);"><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://anonymized/auth/realms/anon/protocol/saml"/></span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: monospace; font-size: 13px; color: rgb(0, 0, 0);"><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://anonymized/auth/realms/anon/protocol/saml"/></span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: monospace; font-size: 13px; color: rgb(0, 0, 0);"><md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://anonymized/auth/realms/anon/protocol/saml"/></span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">----------<br>
<br>
</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">And here's the SSO and logout tag in the SP:</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">----------</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: monospace; font-size: 13px; color: rgb(0, 0, 0);"><SSO entityID="https://anonymized/auth/realms/anon"> SAML2 </SSO></span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: monospace; font-size: 13px; color: rgb(0, 0, 0);"><!-- SAML and local-only logout. --></span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: monospace; font-size: 13px; color: rgb(0, 0, 0);"><Logout>SAML2 Local</Logout></span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">----------</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"><br>
</span></div>
<div style="text-align: left; text-indent: 0px; background-color: rgb(255, 255, 255); margin: 0px;">
<span style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);" class="elementToProof">This is happening with Shibboleth SP 3.3.0 on Apache 2.4. Do you think that there's something
misconfigured? I'd appreciate any tips on how to further debug this.<br>
<br>
Thanks!<br>
Catalin</span></div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div id="Signature">
<div><br>
</div>
<table id="x_0.78qihnrt0u" cellspacing="0" cellpadding="0px" style="width:600px; margin-bottom:10px">
<tbody>
<tr>
<td valign="top" class="" colspan="2"><span style="font-size:14pt; font-family:'Segoe UI',Frutiger,'Frutiger Linotype','Dejavu Sans','Helvetica Neue',Arial,sans-serif; color:rgb(2,30,152)"><b style="font-size:14pt">Catalin Iosif</b><br>
</span><span style="color:rgb(2,30,152); font-family:'Segoe UI',Frutiger,'Frutiger Linotype','Dejavu Sans','Helvetica Neue',Arial,sans-serif; font-size:10pt"><span style="font-size:10pt">Software Engineer<br>
</span></span><span style="font-size:12pt; font-family:"Segoe UI",Frutiger,"Frutiger Linotype","Dejavu Sans","Helvetica Neue",Arial,sans-serif; color:rgb(2,30,152)"><br style="font-size:12pt">
</span></td>
</tr>
</tbody>
<tbody>
<tr>
<td valign="bottom" class="" colspan="1"><span style="font-size:10pt"><span height="20" style="font-family:'Segoe UI',Frutiger,'Frutiger Linotype','Dejavu Sans','Helvetica Neue',Arial,sans-serif; color:rgb(2,30,152)"><a href="tel:" title="" style="text-decoration-line:none"><span style="color:rgb(2,30,152)"></span></a> </span><span style="color:rgb(2,30,152)"></span></span><span style="color:rgb(2,30,152)"> Bucharest,
Romania<br>
</span></td>
<td valign="bottom" rowspan="1" colspan="1" class="" style="text-align:right"><img border="0" width="8px" height="auto" id="x_0.0zsiqzosilsf" alt="nShift-website.png" src="https://nshift.com/hubfs/nShift/signature/link%20icon.png"><span style="text-align:left"> </span><span style="text-align:left; font-size:10pt; font-family:'Segoe UI',Frutiger,'Frutiger Linotype','Dejavu Sans','Helvetica Neue',Arial,sans-serif; color:rgb(2,30,152)"><a href="https://nshift.com/" title="" style="color:rgb(2,30,152); text-decoration-line:none">www.nshift.com</a> </span><a href="https://twitter.com/nShiftOfficial" title="View Twitter" style="text-decoration-line:none"><img width="20" height="20" border="0" id="x_0.reyjclsp0g" alt="twitter" style="width:20px; height:20px" src="https://nshift.com/hubfs/nShift/signature/x-logo.png"></a> <a href="https://www.linkedin.com/company/nshiftofficial" title="View LinkedIn"><img border="0" id="x_0.pdvte477wl7" alt="linkedin" width="20" height="20" style="width:20px; height:20px" src="https://nshift.com/hubfs/nShift/signature/linkedin-link.png"></a><br>
</td>
</tr>
</tbody>
</table>
<a href="https://bit.ly/3TcHLJB"><img alt="email banner nshift28feb.jpg" id="x_0.mmmbi8tdmmt" width="601" height="111" style="" data-outlook-trace="F:1|T:1" src="cid:66472650-09a8-43ba-8fb8-ba9463c4aa5f"></a><br>
<br>
<table id="x_0.blu3ofgtmyh" cellspacing="0" cellpadding="0" style="width:600px; margin-top:5px">
<tbody>
<tr>
<td valign="top" style="width:600px; font-family:Arial; font-size:10pt; color:rgb(2,30,152)">
<a href="https://nshift.com/solutions/emissions-tracker?utm_campaign=Sustainability&utm_source=signature&utm_term=emissions-tracker&utm_content=version-002" title="" style="color:rgb(2,30,152)"></a></td>
</tr>
</tbody>
</table>
<table id="x_0.9km2c0hj1yd" cellspacing="0" cellpadding="15px" style="width:600px">
<tbody>
<tr>
<td valign="top" style="text-align:center"><span class="x_ui-provider x_fy x_b x_c x_d x_e x_f x_g x_h x_i x_j x_k x_l x_m x_n x_o x_p x_q x_r x_s x_t x_u x_v x_w x_x x_y x_z x_ab x_ac x_ae x_af x_ag x_ah x_ai x_aj x_ak" dir="ltr"><a href="https://www.linkedin.com/company/nshiftofficial" title="Follow us on LinkedIn"><img border="0" width="120" height="42" id="x_0.078s6lrda2sf" alt="LinkedIn-follow-us-nShift" style="width:120px; height:42px" src="https://nshift.com/hubfs/nShift/signature/LinkedIn-follow-nShift.png"></a><span style="color:rgb(2,30,152)"><br>
<br>
nShift is</span><span style="color:rgb(2,30,152)"> <b>ISO/IEC 27001:2022</b> certified. <br>
</span><span style="font-size:9pt; font-family:"Segoe UI",Frutiger,"Frutiger Linotype","Dejavu Sans","Helvetica Neue",Arial,sans-serif"><span style="color:rgb(2,30,152)">We collect and process data with caution. Read more in our </span><a href="https://nshift.com/privacy-policy" title=""><span style="color:rgb(2,30,152)">Privacy
Policy</span></a>.</span><br>
</span><span style="font-size:9pt; font-family:'Segoe UI',Frutiger,'Frutiger Linotype','Dejavu Sans','Helvetica Neue',Arial,sans-serif"><br>
</span></td>
</tr>
</tbody>
</table>
<p><br>
</p>
</div>
</body>
</html>