Search code examples
encryptionsingle-sign-onlogoutsamlsimplesamlphp

How to switch off logout encryption in simplesamlphp

All my logout responses from simplesamlphp IdP come encrypted. I looked in simplesamlphp docs but cannot find any option to switch off encryption.

(I have logout signing on; but signing should be independent of encryption, and use Redirect binding)

Is it possible to send logout responses via Redirect binding inencrypted? Or is always on by default for some reason?

Solution

  • The issue was with something else. I just reused the code that processed POST binding to also process Redirect binding; but with Redirect binding, the payload is deflated, so the code for POST cannot be reused directly.