Shibboleth Developers

["Scott Cantor" <>]

> On the other hand, just sticking a URL in here isn't really right, since 
> what you want to say is "the Logout Service of my IdP"; but of course we 
> don't get logout services, or metadata about them, until 2.0.  So maybe 
> this can just be left to the app for now ...

Right, well, my thinking was that the first building block is a defined
endpoint to clear a session, and have a simple parameter that tells it where
to send the user afterward.

So on top of that, you could build the link so the user ends up at your
"well-defined" page if that's what you want. The starting link just has to
send the user to this endpoint with that parameter.

But it would be a simple matter to support another optional URL in the
<md:LogoutService> element or even define the ResponseLocation attribute as
having this meaning when the Binding attribute is
urn:mace:shibboleth:sp:1.3:Logout, which is my tenative profile URI for "the
1.3 cookie clearing hack".

-- Scott