Skip to content
Snippets Groups Projects
Commit 05f28414 authored by Tim van Dijen's avatar Tim van Dijen
Browse files

Restore logout-behaviour for IdP's that do not send a saml:NameID in their LogoutRequest

parent 2932e1e3
No related branches found
No related tags found
No related merge requests found
......@@ -1045,7 +1045,12 @@ class SP extends Auth\Source
Assert::keyExists($state, 'saml:logout:Type');
$logoutType = $state['saml:logout:Type'];
Assert::oneOf($logoutType, ['saml2']);
Assert::oneOf($logoutType, ['saml1', 'saml2']);
// State variable saml:logout:Type is set to saml1 by us if we cannot properly logout the user
if ($logoutType === 'saml1') {
return null;
}
return $this->startSLO2($this->config, $state);
}
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment