From 58462e7bd9af83f2e09ca1e742977e15833dbe79 Mon Sep 17 00:00:00 2001
From: Patrick Uiterwijk <puiterwijk@redhat.com>
Date: Jan 05 2016 15:54:14 +0000
Subject: Skip provider if it doesn't support single logout


Some providers don't have a singlelogout service, in which case we
should just move on instead of crashing.

Ticket: #206
Fixes: #66
Signed-off-by: Patrick Uiterwijk <puiterwijk@redhat.com>
Reviewed-by: Rob Crittenden <rcritten@redhat.com>

---

diff --git a/ipsilon/providers/saml2idp.py b/ipsilon/providers/saml2idp.py
index a6137f8..9323e0c 100644
--- a/ipsilon/providers/saml2idp.py
+++ b/ipsilon/providers/saml2idp.py
@@ -424,6 +424,13 @@ Provides SAML 2.0 authentication infrastructure. """
                 session.provider_id
             )
             return self.idp_initiated_logout()
+        except lasso.ProfileUnsupportedProfileError:
+            self.error(
+                'Service Provider %s does not support Single Logout. '
+                'Trying next session' %
+                session.provider_id
+            )
+            return self.idp_initiated_logout()
         try:
             logout.buildRequestMsg()
         except lasso.Error, e: