1 260
szerkesztés
Módosítások
→SAML2
== Expected results ==
=== SAML2 ===
Single Logout profile is for SAML2 only. Therefore SP6 (Neanderthalensis) and will always fail. Note that SP7 (Ancient Greek) actually ''speaks'' SAML2 although it initiates SSO with Shibboleth protocol. Therefore you cannot '''initiate''' SLO from SP7 but you can participate in SLO. SP5 (Old Slowhand) will always failunless the Logout request is initiated by it.
=== Front-channel, back-channel ===
The IdP can fallback to back-channel, if the logout is front-channel and the SP software does support only back-channel bindings. '''Not the other way''', because front-channel bindings need the information held in browser cookies.
