Mug Developer
Mug Developer

Reputation: 193

SAML 2.0 LogoutRequest

I am working on handling LogOutRequest from a replying party on the STS side. I can parse LogoutRequest, delete the cookie and generate a LogoutResponse. The problem is where to send the LogoutResponse, I did not find the information about reply url. Any ideas?

Upvotes: 3

Views: 2210

Answers (2)

Gaucho
Gaucho

Reputation: 919

Usually you get that info in the Issuer element of the request.

Hope it helps,

Luis

Upvotes: 1

Scott T.
Scott T.

Reputation: 6282

SingleLogoutService information is defined as part of the SAML 2.0 metadata that partners would exchange during setup. That would tell you where the Single Logout handlers are, and for which binding. I don't believe this information is typically populated in the logout request messages themselves.

Upvotes: 1

Related Questions