From e3fbe58a529b44e4ef592b3b5fc136ea6d66a532 Mon Sep 17 00:00:00 2001
From: Hans Zandbelt <hans.zandbelt@surfnet.nl>
Date: Thu, 11 Dec 2008 18:45:47 +0000
Subject: [PATCH] deal with WS-Fed logout callback
git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@1061 44740490-163a-0410-bde0-09ae8108e29a
---
www/wsfed/sp/prp.php | 7 +++++--
1 file changed, 5 insertions(+), 2 deletions(-)
diff --git a/www/wsfed/sp/prp.php b/www/wsfed/sp/prp.php
index 76e4584e3..396656f43 100644
--- a/www/wsfed/sp/prp.php
+++ b/www/wsfed/sp/prp.php
@@ -2,8 +2,6 @@
/**
* WS-Federation/ADFS PRP protocol support for simpleSAMLphp.
*
- * This endpoint currently only supports assertions. Logout is not implemented.
- *
* The AssertionConsumerService handler accepts responses from a WS-Federation
* Account Partner using the Passive Requestor Profile (PRP) and handles it as
* a Resource Partner. It receives a response, parses it and passes on the
@@ -25,6 +23,11 @@ SimpleSAML_Logger::info('WS-Fed - SP.AssertionConsumerService: Accessing WS-Fed
if (!$config->getBoolean('enable.wsfed-sp', false))
SimpleSAML_Utilities::fatalError($session->getTrackID(), 'NOACCESS');
+if (!empty($_GET['wa']) and ($_GET['wa'] == 'wsignoutcleanup1.0')) {
+ print 'Logged Out';
+ exit;
+}
+
/* Make sure that the correct query parameters are passed to this script. */
try {
if (empty($_POST['wresult'])) {
--
GitLab