Re: [saml-dev] multiple SingleLogoutService elements with identical Binding

On 10/7/13 6:30 AM, "Peter Schober" <> wrote:
>
>As such adding any additional SingleLogoutService elements would be
>superfluous and would never achieve anything, right?

It's undefined behavior, but for front-channel bindings, there's no
facility in the protocol for distinguishing which one to use.

Logout, like a lot of the spec, was geared to the federation gateway use
case and not the "resource-adjacent" approach that Shibboleth uses to
unify enterprise and federated SSO.

-- Scott