diff options
| author | Rob Crittenden <rcritten@redhat.com> | 2015-06-25 11:00:59 -0400 |
|---|---|---|
| committer | Patrick Uiterwijk <puiterwijk@redhat.com> | 2015-07-16 15:04:36 +0200 |
| commit | 2751451f4158417e66974d6415d2da84f612ab3c (patch) | |
| tree | b2f9237ab99aa563b9922d073dfcff73e188e994 /ipsilon/install/ipsilon-client-install | |
| parent | 426f03dffc8f648a12b5f8a4b2ab30c8b4498be3 (diff) | |
| download | ipsilon-2751451f4158417e66974d6415d2da84f612ab3c.tar.gz ipsilon-2751451f4158417e66974d6415d2da84f612ab3c.tar.xz ipsilon-2751451f4158417e66974d6415d2da84f612ab3c.zip | |
Add support for logout over SOAP
As each login session comes in, store the supported logout
mechanisms in the SP metadata.
Upon a logout request, loop through all of those SP's that
support SOAP and log those out first, then log out any
remaining sessions using HTTP Redirect.
https://fedorahosted.org/ipsilon/ticket/59
Signed-off-by: Rob Crittenden <rcritten@redhat.com>
Reviewed-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Diffstat (limited to 'ipsilon/install/ipsilon-client-install')
| -rwxr-xr-x | ipsilon/install/ipsilon-client-install | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/ipsilon/install/ipsilon-client-install b/ipsilon/install/ipsilon-client-install index 49d9e78..d8a310c 100755 --- a/ipsilon/install/ipsilon-client-install +++ b/ipsilon/install/ipsilon-client-install @@ -97,6 +97,7 @@ def saml2(): m.set_entity_id(url_sp) m.add_certs(c) m.add_service(SAML2_SERVICE_MAP['logout-redirect'], url_logout) + m.add_service(SAML2_SERVICE_MAP['slo-soap'], url_logout) m.add_service(SAML2_SERVICE_MAP['response-post'], url_post, index="0") m.add_allowed_name_format(SAML2_NAMEID_MAP[args['saml_nameid']]) sp_metafile = os.path.join(path, 'metadata.xml') |