SAML lougout/redirect

[hy-tomas-terala]

Please confirm the following

• [X] I agree to follow this project's code of conduct.
• [X] I have checked the current issues for duplicates.
• [X] I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.

Feature Summary

We would like to make sure that logging out from AWX would either redirect you to your preferred IdPs logout page or preferrably for the AWX logout to also log out an account from the IdP while using AWX SAML integration.

The path in the web-client where this setting would be visible: #/settings/saml/details

The python SAML-Toolkit also already supports this functionality natively, but there is no mention of it in the AWX/Tower documentation. The current documentation does not have a way of doing this. Below are two screenshots on the difference in the SAML definitions. First how AWX/tower/controller defines an idp.

Currently

Request for the future

If it is easier, having the SAML logout path for the IdP or logout redirect being defined in a separate box in the #/settings/saml/details is also fine, either way should accomplish the same feature.

I saw that there were prior issues from years ago mentioning this same feature, but they were closed.

Thanks in advance!

[djyasin]

@hy-tomas-terala thank you so much for your submission!

We are considering adopting something like this in a future release.

[hy-tomas-terala]

Looking forward to seeing this in action!

[gaex]

Hello All, I'm using awx 23.5 and I didn't find a way to set saml logout url (using SingleLogoutService) pointing to keycloak. Can you help me please?

[Omerezoo39]

1. <التفاصيل><ملخص>التفاصيل</الملخص> <ب>

تنفيذ إشاراتي المرجعيه الخاصه بي على سفاري

</التفاصيل>

[Omerezoo39]

<التفاصيل><لخص>التفاصيل</الملخص><ب> > > تنفيذ إشاراتي المرجعية الخاصة بي على سفاري هنا &&