Kentor AuthServices: ClaimTypeNamespace for SessionIndex and LogoutNameIdentifier

Question

As a service provider we are getting following claims from IDP (ADFS).

• http://kentor.se/AuthServices/LogoutNameIdentifier
• http://kentor.se/AuthServices/SessionIndex

In AuthServices codebase AuthServicesClaimTypes.ClaimTypeNamespace is set to http://kentor.se/AuthServices. Should this namespace reflect SP (https://mysite/AuthServices)?

Also, under identityProviders configuration section (web.config), I am not setting logoutUrl, but still I am getting LogoutNameIdentifier claim from Idp. We do not support single logout.

Any suggestion is highly appreciated.

Thank you.

Answer 1

• 不，它们不应该反映SP的命名空间。声明名称是使用http://kentor.se来确保它们不会与其他内容发生冲突。
• 即使您尚未配置单一退出，但这些声明仍然缺失，这是一个缺失的功能/错误。