Change By:

Kai P. (01/Sep/13 8:38 AM)

Description:

I have problems with global logout in combination with simplesamlphp.

I do a login from PL SP (redirect to IDP, login, redirect to SP). After that I open my PHP SP (redirect to IDP, get SAML Auth, redirect to PHP SP). Then I globaly logout from PL SP and my PHP SP get's an LogoutRequest without NameID attribute.

This looks like the problem mentioned here: https://community.jboss.org/thread/172231?start=0&tstart=0

For reference, here is the SAML messages missing NameID:

<samlp:LogoutRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
                     xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
                     ID="ID_f3493b45-1307-4609-b1a0-a98036f1984f"
                     IssueInstant="2013-09-01T12:18:04.378Z"
                     Version="2.0"
                     >
    <saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">http://172.16.31.170:8080/messeidp/</saml:Issuer>
</samlp:LogoutRequest>

This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira