← Prev in month ← Prev in thread

Potential Errata: Session Index on logout

From
Conor P. Cahill <>
Date
2005-11-04T13:24:08+00:00
ID
Thread
Potential Errata: Session Index on logout
The language surrounding session index on the <LogoutRequest>
(line 2546) is a bit lacking.  I suggest we replace that line with
something along the lines of:

  
The index of
the session between the pricipal identified by the subject and the
authenticating authority.   This must correlate to the
<SessionIndex> that was present in the <AuthnStatement> of
the assertion used in the session that is being terminated by this
<LogoutRequest>, if any.   

    

I also think we
should require that this be specified by the SP when sending an
SP-Initiated LogoutRequest if the assertion had a SessionIndex in it. 
I was unable to find such a statement in the specs.

Conor
← Prev in month ← Prev in thread