Re: [saml-dev] multiple SingleLogoutService elements with identical Binding

["Cantor, Scott" <cantor.2@osu.edu>]

On 10/7/13 6:30 AM, "Peter Schober" <peter.schober@univie.ac.at> wrote:
>
>As such adding any additional SingleLogoutService elements would be
>superfluous and would never achieve anything, right?

It's undefined behavior, but for front-channel bindings, there's no
facility in the protocol for distinguishing which one to use.

Logout, like a lot of the spec, was geared to the federation gateway use
case and not the "resource-adjacent" approach that Shibboleth uses to
unify enterprise and federated SSO.

-- Scott