Using spring-boot-starter-security 3.2.0 on a java app, I’m having some trouble with the single logout request sent by the IDP.
The logout isn’t done because on the application even though the request responds is ok (/logout/saml2/slo)
It seems that the issue lies with the request authentication.
When in Saml2LogoutRequestFilter class, it seems that the framework expect the request to contain a session.

”
protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain chain) throws ServletException, IOException {
Authentication authentication = this.securityContextHolderStrategy.getContext().getAuthentication();
“

Should the request comes with a session ID? it only has a saml metadata
or does it require the application to find the session based on metadata? if so, must it be done manually?

thanks