SLO gives exception

SAML for ASP.NET
1

Hi,

I am successfully signed-in but when I call :

SAMLController.ConfigurationID = “tenant-1”;
SAMLServiceProvider.InitiateSLO(Response, “User wishes to logout.”);
and getting below exception:

“There is no SSO session to partner http://sts.someserver/adfs/services/trust to logout”

Any help would be appreciated.

Thanks,
Muhammad Masood

2

Hi Muhammad
By default we store SAML SSO state in the ASP.NET session.
Please ensure you don’t clear or abandon the current ASP.NET session until after SAML logout completes.
This will be after calling SAMLServiceProvider.ReceiveSLO to receives the logout response from the identity provider.

3
[quote]
ComponentSpace - Monday, June 20, 2016
Hi Muhammad
By default we store SAML SSO state in the ASP.NET session.
Please ensure you don't clear or abandon the current ASP.NET session until after SAML logout completes.
This will be after calling SAMLServiceProvider.ReceiveSLO to receives the logout response from the identity provider.
[/quote]

Hi,

I checked the code and I am not clearing any session before initiate SLO request but still gets the exception. Shall I send the log file?

Thanks,
Muhammad Masood
4

Yes, please send the log. I’d like it to include the SSO and the SLO.

5
[quote]
ComponentSpace - Sunday, June 26, 2016
Yes, please send the log. I'd like it to include the SSO and the SLO.
[/quote]

Thanks. I have sent the file to support email.
6

Thanks. I’ve replied to your email.

7

Hi, I have same issue, can’t figure out where is the problem.

Maybe I should store something in session to mark this as SSO session to IdentityProvider ?

NOTE: Session is not deleted
NOTE-2: I sent the log file to support.

8

The original poster’s issue was that he was using the low-level API to receive the SAML response and the high-level API for SAML logout.
The APIs shouldn’t be mixed. The high-level API is the recommended API and should be used for both SSO and SLO.
Someone will reply to your email shortly.

9

I’m not sure if we received your email with a log file.
If not, could you please send it again and mention this forum topic?
Thanks.