Table of Contents

LogoutConsumer

Warning

This valve is usually used with the legacy SAML authenticators. If that is the case, it is recommended to plan for migrating the authenticator to the new protocol agnostic authenticator architecture, where this valve won't be needed anymore since it's already builtin. More information about the legacy authenticators can be found here.

Note

Used in conjunction with SAMLLogout authenticator to enable SLO in SAML federations.

Properties

Name Description Default value Mandatory Supports property expansion
targetIDP The id if the IDP to handle/sign the logout request. (Not EntityID) Yes Yes

Example Configuration

{
    "name": "LogoutConsumer",
    "config": {
        "targetIDP":"<replace_this_with_targetEntityID_from IDP>"
    }
}

Requirements

SAML module is deployed.

A SAMLRequest must be found in the request.