← Prev in month ← Prev in thread

Logout request from SP without web browser

From
Vasu Y <>
Date
2014-04-18T17:40:13+00:00
ID
Thread
Logout request from SP without web browser
I am trying to handle user session timeouts at service provider and we may not have user-agent/web-browser in cases where the user has suddenly closed browser. In this case, we want SP to notify the IDP to end IDP's user-session by sending a logout request.

This is my understanding of initiating logout request without the web browser, correct me if i am wrong:

1) SP creates SAML Artifact (SAMLArt parameter & optionally RelayState parameter) corresponding to logout request and sends to IDP.

2) IDP responds by sending <ArtifactResolve> to SP's ArtifactResolutionService.

3) SP's ArtifactResolutionService
 responds by returning <ArtifactResponse> containing LogoutRequest.

4) IDP creates SAML Artifact corresponding to logout response and sends to SP.

5) SP responds by sending <ArtifactResolve> to IDP's ArtifactResolutionService.

6) IDP's ArtifactResolutionService responds by returning <ArtifactResponse> containing LogoutResponse.

Question: To which endpoint at IDP should SP send SAML Artifact corresponding to logout request (with SAMLArt parameter). It doesn't look like SP should send to IDP's SingleLogoutService's HTT-POST or HTTP-Redirect binding locations.
← Prev in month ← Prev in thread