Versions Provider-specific Metadata Obtain Server Metadata

4-16 Oracle Fusion Middleware Administrators Guide for Oracle Identity Federation ■ returnurl - This is the URL to which the user is sent after a successful SSO operation. It is required if the Unsolicited Relay State property is empty. An example of the URL format is: http:host:portfedspinitiatesso?providerid=http3A2F2Fidp.comreturnurl=Prot ectedAppURL

4.2.4 Perform IdP-initiated Single Sign-On

Oracle Identity Federation provides the ability to initiate an SSO operation by directly requesting a URL at the Oracle Identity Federation instance acting as an IdP; this is called an SSO IdP-initiated operation. The url to be requested on Oracle Identity Federation is of the form: http:host:portfedidpinitiatesso. The following query parameters can be specified: ■ providerid - This is the identifier of the SAML 2.0 SP to use to perform the SSO operation optional. ■ federationid - This is the identifier of the affiliation to use for the SSO optional. See Section 6.2, Working with Affiliations for more information. ■ returnurl - This is the URL to which the user is sent after a successful SSO operation. An example of this type of URL is: http:host:portfedidpinitiatesso?providerid=http3A2F2Fsp.comreturnurl=Prot ectedAppURL

4.2.5 Launch the Logout Process

Launch the logout process by accessing a URL of the form: http:hostname:portfeduserlogout?returnurl=http3A2F2Fanotherhostname2Fpath The logout service takes a returnurl parameter, which is necessary for correct operation; the user will be redirected to this URL after the logout process completes. If no returnurl parameter is specified when invoking the Oracle Identity Federation logout URL, the sign-off operation is performed, and the server will display the built-in logout result page. The logout is performed for all peer providers for the following protocols: ■ SAML 2.0 ■ WS-Federation ■ Liberty 1.1 Note: Check that the query parameter values are correctly URL-encoded. Note: Check that the query parameter values are correctly URL-encoded.