CODEWITHSUNDEEP
springspring-securityspring-saml
user3754289
user3754289

Reputation: 89

Spring Security SAML Global Logout not sending saml response to IDP

I created my SP using Spring SAML Security. I'm having an issue with Global logout. The logoutRequest is sent to IDP and IDP sends back the logoutResponse. SP validates the message successfully and the logout.jsp is reached without a problem. The problem I'm having is that the IDP is expecting a “SAML Response” from the SP after successful logout to clear the session. Am I missing something in the configuration?

Upvotes: 0

Views: 1061

Answers (1)

Vladimír Schäfer
Vladimír Schäfer

Reputation: 15533

SP is not supposed to send any additional response once it receives LogoutResponse from IDP. See saml2-profiles, chapter 4.4 for details. It also contains a nice picture which illustrates the message exchanges.

Upvotes: 2

Related Questions