Módosítások

Our proposal is to support prefer back-channel endpoints at the service provider side, and - if the unless your application does not require the use of front-channel notifications - remove all needs to be notified via front-channel logout endpoints from the metadata. If the For example,* if your application must rely on behind your SP needs the session cookiewith the notification, and use only front-channel bindings in the SP supports both back- and front channelsmetadata, then the * otherwise use only back-channel endpoint should be removedbinding in the SP metadata.

By these mutually exclusive endpoint sets, the SP can clearly advise the IdP which binding it should use when contanting this SP. Thus on the IdP side, both implementations need to be available.