ADFS 3.0 Logout - allow two SAML Logout Endpoints

Hello,

I have searched low and high for a solution but could not find a definitive answer if my problem can be solved. Even just knowing that it cannot be solved would be extremely helpful.

We have a single identity service that has two DNS names assigned to it, and want to enable federation to a ADFS 3.0 RP. Requests to our identity service can come to either domain. The federated login is successful for all requests, independent of the domain, however, the logout callback from the ADFS 3.0 RP would always go to the first (default) configured SAML Logout Endpoint, irrespective from which domain the request came from. This creates downstream issues with cookies from our identity service being handled on the wrong domain, when the logout request did not come from the default domain.

I have tried using wreply to tell the RP which logout endpoint it should call, but the parameter got ignored.

I have found various suggestions in forums and blogs that say that two logout URLs are effectively not possible with ADFS 3.0 but no definite answer.

If anybody has had this scenario working, it would be great to know.

Kind Regards,
Florian