Hi All,
I have a simplesaml SP with a picketlink IDP.
IDP metadata contains http://<idp_url>/logout.jsp as SingleLogout URL (logout.jsp just invalidate session)
When I click "logout" in SP, SAML Logout and response request are generated but the resulting URL after logout is
http://<idp_url>/<relay_state>
for example: http://<idp_url>/_71d1774a7bb1998dbdbaee53b2e9ffdb1b40868162
which is a big number that doesn't make sense inside the URL.
The latest logoutResponse from IDP is
<samlp :LogoutResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
Destination="_71d1774a7bb1998dbdbaee53b2e9ffdb1b40868162"...
contains the worng wrong (?) destination.
|
