Symantec Access Management

 View Only
  • 1.  How to investigate SLO PartialLogout?

    Posted Feb 28, 2018 03:19 AM
    Hi, I am trying to implement SLO where IDP is CA SSO and SP is onelogin java library.
    IDP is sanding back LogoutResponse with:
    <StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:PartialLogout"/></StatusCode>
    How to investigate this to have a full logout?


  • 2.  Re: How to investigate SLO PartialLogout?

    Posted Mar 08, 2018 11:17 AM



    I would review the FWSTrace.log to see if there is any error there that could help you identify why you are seeing a partial logout. There can be many reasons for this, one common reason is when the logout request has some mismatch, like UserID and NameID not matching in the Logout Request, or if the NameID format is the same in the partnershipand in the SLO request.


    I hope it helps!