What configuration to do in IDP to initiate SLO and how to consume IDP initiated SLO response in SP using SAML 2.0

3
votes

We build the SSO in my application for login using SAML 2.0. Here I want to build IDP initiated SLO for logout.

Question 1. What configuration we need to do in IDP to initiate SLO?

  1. How to consume IDP initiated SLO response in SP using SAML 2.0?

Please help me

2
samlsaml-2.0pingfederateonelogin
Can you describe your environment? what software are you using for the IdP and for the SP? – smartin
I am using oneLogin(onelogin.com) as IDP and my application as SP. I am using SAML 2.0 for sso. – Santhosh Devadiga
Good question. I have reviewed onelogin docs and can't find any information how to initiate logout from IdP side. – Michał Maluga

2 Answers

1
votes

For the second question I would recommend to use onelogin toolkits.

You can choose from ASP/.NET, Java, PHP, Python and Ruby. For example PHP toolkit documentation shows in details how to implement every step of login/logout process. There is a similar section for Ruby.

1
votes

Build both SP initiated and IDP initiated SLO in SP application and based on IDP SLO configuration(third party application), we can enable SP or IDP or Both initiated SLO.

Check more details about SLO using SAML 2.0.