java - WSO2 Identity Server: Single Logout not sending to all Service Providers -


i'm attempting implement single logout using wso2, have hit wall.

the initiating service provider able send logout request idp (wso2), , receive logout-response. however, no other logged-in service providers receiving logout command idp.

i've enabled debug-level logging logoutrequestsender class via console, , seeing following log: "a logoutreqsendertask assigned thread pool".

looking @ sourcecode logoutrequestsender class, private class "logoutreqsendertask" (which implements "runnable") supposed create debug-log value of samlrequest:

public void run() {     list<namevaluepair> logoutreqparams = new arraylist<namevaluepair>();     // set logout request     logoutreqparams.add(new basicnamevaluepair("samlrequest", logoutreqdto.getlogoutresponse()));      if(log.isdebugenabled()) {         try {             log.debug("samlrequest : " + samlssoutil.decodeforpost(logoutreqdto.getlogoutresponse()));         } catch (identityexception e) {             log.debug(e);         }     }     //...snip... } 

however, log never getting written, indicating code not being executed.

the thought i've been able come "run" method hitting unhandled excpetion before enters first "try" of method, , never gets write log (because code using "executorservice" queue threads, unhandled exceptions fail silently).

here sample (anonymized) of logout request sending sp idp:

<samlp:logoutrequest      xmlns:samlp="urn:oasis:names:tc:saml:2.0:protocol"      id="s2e267375a5bfb18e3b54fe839af43b2f84aae1e7a"      version="2.0"      issueinstant="2015-05-13t20:19:41z"      destination="[sso server location]">     <saml:issuer xmlns:saml="urn:oasis:names:tc:saml:2.0:assertion">[issuer name]</saml:issuer>     <saml:nameid xmlns:saml="urn:oasis:names:tc:saml:2.0:assertion" format="urn:oasis:names:tc:saml:2.0:nameid-format:transient" namequalifier="[sso server location]">username</saml:nameid>     <samlp:sessionindex xmlns:saml="urn:oasis:names:tc:saml:2.0:assertion">d1b98786-f9d7-45dd-9712-a63f8f64cb02</samlp:sessionindex> </samlp:logoutrequest> 

what doing wrong here?


Comments

Popular posts from this blog

Email notification in google apps script -

c++ - Difference between pre and post decrement in recursive function argument -

javascript - IE11 incompatibility with jQuery's 'readonly'? -