There are a variety of scenarions which are somewhat difficult to test. In future these may be automated:
- Test using 1 IdP (SSP) with dual off eg:
http://moodle.local/login/index.php
- Test using mulitple IdP (SSP) with a choice of IdP eg:
https://samltest.id/start-sp-test/
http://moodle.local/auth/saml2/login.php?wants&idp=c4b9265e38e3107bee1ccdf9d6475676&passive=off
- Test Single logout starting from the SP
http://moodle.local/login/logout.php?sesskey=ihwmEywPxu
- Test Single logout starting from the IdP. Notice that
ReturnTo
URL domain should be intrusted.url.domains
in IdP config. If that is not the case, try usingReturnTo=http://idp.local/simplesaml
which should work as SimpleSAMLphp trusts self hostname by default.
http://idp.local/simplesaml/saml2/idp/SingleLogoutService.php?ReturnTo=http://moodle.local/
- Test IdP initiation login
- Test IdP init login when the IdP is NOT the default IdP