Forum Discussion
gdoyle
Cirrostratus
CirrostratusAPM/SAML Logout.
I have a customer that is having an issue with their SAML logouts. Our Big IP is acting as the SP and reaching out to an external IdP. The customer then logs into WebsiteA and has access to multiple...
Maybe this article is of use to you. It gives an overview about the SLO (single logout) proces on the BIG-IP.
Maybe this article is of use to you. It gives an overview about the SLO (single logout) proces on the BIG-IP.
gdoyleCirrostratus
CirrostratusThank you for that response, Niels. I have reviewed that article previously which is why I believe the issue is with improper configuration/coding on the IdP side. As far as I understand it, it is the responsibility of the IdP to validate logouts and notify any/all relevant SPs of the logouts that occur.
Yes, I agree. For both SP-initiated and IDP-initiated SLO it reads:
The IdP validates the request and send new POST Logout Request messages to all other participant SPs.
