Take the 2-minute tour ×

I am working on handling LogOutRequest from a replying party on the STS side. I can parse LogoutRequest, delete the cookie and generate a LogoutResponse. The problem is where to send the LogoutResponse, I did not find the information about reply url. Any ideas?

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

SingleLogoutService information is defined as part of the SAML 2.0 metadata that partners would exchange during setup. That would tell you where the Single Logout handlers are, and for which binding. I don't believe this information is typically populated in the logout request messages themselves.

share|improve this answer
This is a simple asp.net app demo, there is no metadata exchange. What is the scenario in real life? How does SAML 2.0 iDP know where to redirect after signout? –  Mug Developer Jul 18 '11 at 23:22
An IDP should know what SP's the user has logged into, and then upon receiving a logout request send logout requests & receive responses from all said SP's. Again, it would know which URL's to send the request to based on partner configuration info. –  Scott T. Jul 19 '11 at 5:50
add comment

Usually you get that info in the Issuer element of the request.

Hope it helps,


share|improve this answer
add comment

Your Answer


