search

Sustainsys / Saml2

Saml2 Authentication services for ASP.NET
Other
961 stars 604 forks source link

logoutUrl not working as expected, IdP is still logged in #1203

Closed adrian3092 closed 4 years ago

adrian3092 commented 4 years ago

Hello. I'm trying to implement your connector with logoutUrl but upon logging out from my application, I'm still logged into the IdP. I'm not sure if this is a bug or just me mis-interpreting the documentation. Any input you can provide is appreciated.

Below is the configuration that I currently have within my Web.Config. 


<?xml version="1.0" encoding="UTF-8"?>
<sustainsys.saml2 entityId="https://nyw-az03.infra.us" returnUrl="https://nyw-az03.infra.us/Account/ExternalLoginCallback">
   <identityProviders>
      <add entityId="http://www.okta.com/exkkzrrtw4i3td5F60h7" signOnUrl="https://dev-786854.oktapreview.com/app/dev786854_orchestrator_1/exkkzwwtw4i3td5F60h7/sso/saml" logoutUrl="https://dev-786854.oktapreview.com/app/dev786854_orchestrator_1/exkkzwwtw4i3td5F60h7/slo/saml" allowUnsolicitedAuthnResponse="true" binding="HttpRedirect">
         <signingCertificate storeName="My" storeLocation="LocalMachine" x509FindType="FindByThumbprint" findValue="711da9418e31cf1b8c0f3fb2d7a1b2143f64bb76" />
      </add>
   </identityProviders>
   <federations>
      <add metadataLocation="https://dev-786854.oktapreview.com/app/exkkzwwtw4i3td5F60h7/sso/saml/metadata" allowUnsolicitedAuthnResponse="true" />
   </federations>
   <serviceCertificates>
      <add storeName="My" storeLocation="LocalMachine" x509FindType="FindByThumbprint" findValue="4a31f75de0d506c4488d4906145ad969d99e3814" />
   </serviceCertificates>
</sustainsys.saml2>
AndersAbel commented 4 years ago

Please enable logs. There are quite a few requirements that need to be fulfilled for single logout to work. There is a detailed message written to the log about it, indicating what values are found and not.