How to investigate SLO PartialLogout?

[marekw]

Hi, I am trying to implement SLO where IDP is CA SSO and SP is onelogin java library.
IDP is sanding back LogoutResponse with:
<StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:PartialLogout"/></StatusCode>

How to investigate this to have a full logout?

 

[Legacy User]

Hi,

 

I would review the FWSTrace.log to see if there is any error there that could help you identify why you are seeing a partial logout. There can be many reasons for this, one common reason is when the logout request has some mismatch, like UserID and NameID not matching in the Logout Request, or if the NameID format is the same in the partnershipand in the SLO request.

 

I hope it helps!