search

goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
13.76k stars 926 forks source link

Authentik should send a SAML LogoutResponse #7137

Open tograss opened 1 year ago

tograss commented 1 year ago

Describe the bug According to the SAML standard (https://www.oasis-open.org/committees/download.php/56783/sstc-saml-profiles-errata-2.0-wd-07-diff.pdf ) line 1409 authentik must send a LogoutResponse Quote: _The session participant/authority MUST process the message as defined in [SAMLCore]. After processing the message or upon encountering an error, the entity MUST issue a

message containing an appropriate status code to the requesting identity provider to complete the SAML protocol exchange._ For some SP's this leads to problems terminating there own sessions. Resulting in users seeing the authentik logout window but the sp sessions stays open. **To Reproduce** Create a SAML Provider. Log into SP. Start SAML tracer Logout of SP Get Redirect to authentik and shown the logout page. Observe that no logout response has been send. **Expected behavior** Authentik should follow the SAML standard wich states that authetnik MUST send a LogoutResponse. **Version and Deployment (please complete the following information):** - authentik version: 2023.8.3 - Deployment: Docker **Additional context** Add any other context about the problem here.
authentik-automation[bot] commented 11 months ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.