title: Single Log out not working with Shibboleth IdP
body: <p>I have been trying to implement a WEB SSO Service provider in java. I am using Shibboleth Identity Provider. Things are working fine till authentication step and I am successfully able to create a session/set cookie for a user. But when I'm trying to use single sign out functionality I am getting an "RequestDenied" response from shibboleth IdP. I checked the logs and there it was written <strong>Inbound message issuer was not authenticated.</strong> The same issuer is working fine with log in step but giving error with log out step. Any configuration file to update for it, any pointer, suggestion? This is my log out request.</p>
  
  <pre><code>&lt;samlp:LogoutRequest xmlns:samlp="urn:oasis:names:tc:SAML:2.0:protocol"
                       ID="jiojjcjckjaflbedlcjcpcnecigbjhaekalmfkcg"
                       IssueInstant="2014-02-24T23:30:25.257Z"
                       NotOnOrAfter="2014-02-24T23:35:25.257Z"
                       Version="2.0"
                       &gt;
      &lt;saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"&gt;https://localhost/sp/shibboleth&lt;/saml:Issuer&gt;
      &lt;saml:NameID xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion"
                   Format="urn:oasis:names:tc:SAML:2.0:nameid-format:transient"
                   NameQualifier="urn:oasis:names:tc:SAML:2.0:assertion"
                   &gt;rohit&lt;/saml:NameID&gt;
      &lt;samlp:SessionIndex/&gt;
  &lt;/samlp:LogoutRequest&gt;
  </code></pre>
  
  <p>And this is what I'm getting in response.</p>
  
  <pre><code>&lt;saml2p:LogoutResponse xmlns:saml2p="urn:oasis:names:tc:SAML:2.0:protocol"
                         Destination="https://localhost:8091/SSO/consumer"
                         ID="_02a145f4992cb2e11a8fc4aa43a74096"
                         InResponseTo="jiojjcjckjaflbedlcjcpcnecigbjhaekalmfkcg"
                         IssueInstant="2014-02-24T23:30:25.334Z"
                         Version="2.0"
                         &gt;
      &lt;saml2:Issuer xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
                    Format="urn:oasis:names:tc:SAML:2.0:nameid-format:entity"
                    &gt;https://localhost/shibboleth&lt;/saml2:Issuer&gt;
      &lt;saml2p:Status&gt;
          &lt;saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Responder"&gt;
              &lt;saml2p:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:RequestDenied" /&gt;
          &lt;/saml2p:StatusCode&gt;
          &lt;saml2p:StatusMessage&gt;Message did not meet security requirements&lt;/saml2p:StatusMessage&gt;
      &lt;/saml2p:Status&gt;
  &lt;/saml2p:LogoutResponse&gt;
  </code></pre>