catalyst / moodle-auth_saml2

SAML done 100% in Moodle, fast, simple, secure
https://moodle.org/plugins/auth_saml2
70 stars 132 forks source link

How to use back channel Single Logout? #726

Open gmatisa opened 1 year ago

gmatisa commented 1 year ago

Hi,

Plugin description says "Supports back channel Single Logout which most big organisations require", but I can't find a single example how to use it? Question #1: Can you please give basic instructions... eg. what endpoint should be called by the IdP, what should be submitted? Question #2: Does plugin supports IdP initiated LogoutRequest via SOAP protocol?

Background: I'm trying to achieve the flow described on https://www.identityserver.com/articles/the-challenge-of-building-saml-single-logout (disclaimer: I'm not affiliated with the IdentityServer.com... this page is randomly chosen to illustrate what I need). My Moodle instance is one of the SPx service providers and IdP is an existing identity provider. Integration of SP initiated login/logout has already been finished, what is left is to establish SOAP back channel Single Logout (and this is "a must").

With regards, Goran