Table of Contents

Interface ISamlLogoutNotificationService

Namespace
Fdyay.IdentityServer.Services
Assembly
Fdyay.IdentityServer.AspNetCore.dll

Builds the logout requests that tell a session's SAML service providers it has ended.

public interface ISamlLogoutNotificationService

Remarks

Duende 8.0.1's, measured: a sign-out that does not start at a SAML service provider — the logout page, end_session — reaches the session's service providers through the browser, as front-channel logout reaches the OpenID Connect clients. Each gets a signed, redirect-bound LogoutRequest naming the NameID and SessionIndex its assertion carried, loaded in a hidden iframe on the signed-out page.

Here because the interaction service that assembles the signed-out page's context lives here and the SAML package builds on this one; the implementation is the SAML package's, registered by AddSaml. With none registered, a session's SAML service providers are not told — there is nobody here who could sign the request.

Methods

GetSamlFrontChannelLogoutsAsync(LogoutNotificationContext, CancellationToken)

A logout request for each of the context's SAML sessions that can be told.

Task<SamlLogoutNotificationResult> GetSamlFrontChannelLogoutsAsync(LogoutNotificationContext context, CancellationToken cancellationToken = default)

Parameters

context LogoutNotificationContext
cancellationToken CancellationToken

Returns

Task<SamlLogoutNotificationResult>