Forum Discussion

gdoyle's avatar
gdoyle
Icon for Cirrostratus rankCirrostratus
Jun 11, 2019
Solved

APM/SAML Logout.

I have a customer that is having an issue with their SAML logouts. Our Big IP is acting as the SP and reaching out to an external IdP. The customer then logs into WebsiteA and has access to multiple...
application delivery
BIG-IP Access Policy Manager (APM)
saml
gdoyle's avatar
gdoyle
Icon for Cirrostratus rankCirrostratus

Thank you for that response, Niels. I have reviewed that article previously which is why I believe the issue is with improper configuration/coding on the IdP side. As far as I understand it, it is the responsibility of the IdP to validate logouts and notify any/all relevant SPs of the logouts that occur.

Niels_van_Sluis's avatar
Niels_van_Sluis
Icon for MVP rankMVP
Jun 12, 2019

Yes, I agree. For both SP-initiated and IDP-initiated SLO it reads:

 

The IdP validates the request and send new POST Logout Request messages to all other participant SPs.