Logout Response

SAML Logout Response Examples

The SAML LogoutResponse is sent in reply to a LogoutRequest, confirming that the session has been terminated successfully (or reporting an error).

Example LogoutResponse

<samlp:LogoutResponse xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
                      xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
                      ID="_6c3737282f007720e736f0f4028feed8cb9b40291c"
                      Version="2.0"
                      IssueInstant="2014-07-18T01:13:06Z"
                      Destination="https://sp.example.com/demo1/index.php?sls"
                      InResponseTo="_cbb63e9741b554fc40e94ae3693b0aca81bc0e0c">
    <saml:Issuer>https://idp.example.com/metadata.php</saml:Issuer>
    <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success"/>
    </samlp:Status>
</samlp:LogoutResponse>

Key Elements

Element	Description
ID	A unique identifier for the response
InResponseTo	References the original LogoutRequest ID
Destination	The endpoint that should receive this response
Issuer	The entity that processed the logout
StatusCode	Success or failure status

Status Codes

Code	Meaning
`urn:oasis:names:tc:SAML:2.0:status:Success`	Logout completed successfully
`urn:oasis:names:tc:SAML:2.0:status:Requester`	Error caused by the requester
`urn:oasis:names:tc:SAML:2.0:status:Responder`	Error at the responder
`urn:oasis:names:tc:SAML:2.0:status:PartialLogout`	Not all sessions could be terminated

For interactive SAML logout tools, visit SAMLTool.com.