[FIXED] How to configure slo url for SSOCircle IdP

Issue

I am need an advice how to configure the single logout service url for SSOCIRCLE idp.

I have found the page which helped me with configurung SSO url:

https://www.ssocircle.com/en/idp-tips-tricks/ssocircle-how-to/ point 5.

For example, here is my sso: https://idp.ssocircle.com/sso/idpssoinit?metaAlias=%2Fpublicidp&spEntityID=acc/test.com/testidp

How should I configure slo url?

Also here is some docs: https://www.ssocircle.com/en/idp-tips-tricks/public-idp-configuration/ but I cant understand what should be in url instead of: 'IDPSloPost' value.

Could anyone please suggest the solution ?

Solution

You can either trigger the single logout process from your SP sending a LogoutRequest to the endpoint as listed in http://https://www.ssocircle.com/en/idp-tips-tricks/public-idp-configuration/ (use the correct endpoint matching the binding your SP uses).

Or you can start the logout process from the IDP using the URL https://idp.ssocircle.com/sso/IDPSloInit?metaAlias=%2Fpublicidp Please keep in mind that SLO is much harder to achieve than SSO. All SPs must support the flow correctly otherwise the flow of redirects easily break in front channel bindings.

Answered By - Hos

Answer Checked By - Cary Denson (PHPFixing Admin)