[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [security-services] sstc-saml-profiles-2.0-figures-01.pdf
Beach, Michael C wrote:
> Question:
>
> On page 2 for Logout functionality, I assume 4. <LogoutResponse> may not
> occur?
From this section of sstc-saml-profiles-2.0-draft-17...
1145: 4.4.3.4 Session Participant/Authority issues <LogoutResponse> to Identity
Provider
The session participant/authority MUST process the <LogoutRequest> message as
defined in [SAMLCore]. After processing the message or upon encountering an
error, the entity MUST issue a <LogoutResponse> message containing an
appropriate status code to the requesting identity provider to complete the
SAML protocol exchange.
..it looks like that step must occur.
JeffH
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]