From 844fe7e8c8c0916580be3bb7ed5cd6c4802d4637 Mon Sep 17 00:00:00 2001
From: Scott Koranda <skoranda@gmail.com>
Date: Tue, 2 Jan 2018 11:25:44 -0600
Subject: [PATCH] Better Apache configuration for Shibboleth local logout

Better Apache HTTP Server configuration to support ending the Shibboleth
SP session when the Logout button is clicked.
---
 comanage-registry-shibboleth-sp/000-comanage.conf | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/comanage-registry-shibboleth-sp/000-comanage.conf b/comanage-registry-shibboleth-sp/000-comanage.conf
index 9004131..26310a6 100644
--- a/comanage-registry-shibboleth-sp/000-comanage.conf
+++ b/comanage-registry-shibboleth-sp/000-comanage.conf
@@ -68,4 +68,8 @@
     Require shibboleth
   </Location>
 
+  RewriteEngine On
+  RewriteCond %{QUERY_STRING} !after_redirect
+  RewriteRule ^/registry/auth/logout.* https://%%SERVER_NAME%%/Shibboleth.sso/Logout?return=https://%%SERVER_NAME%%/registry/auth/logout/?after_redirect [L,R]
+
 </VirtualHost>