p2-inc / idp-wizard

Identity Provider setup wizards for Keycloak
https://phasetwo.io
Other
1 stars 1 forks source link

Update the screen to add the callback param in the Auth0 SAML addon settings to the keycloak idp endpoint #157

Closed xgp closed 8 months ago

xgp commented 8 months ago

When an Admin uses keycloak IdP wizard to set up a Auth0 SAML integration, they end up seeing a an issue where logout does not work: missing client.addons.samlp.logout.callback

To resolve this user has to manually add callback param in the Auth0 SAML addon settings to the keycloak idp endpoint.

Context

https://github.com/p2-inc/idp-wizard/assets/244253/d2a0e95b-3a80-4563-876d-6f2f2b3ea98c

Solution

Add the callback param in the Auth0 SAML addon settings to the keycloak idp endpoint. It needs the logout URL specified in the Applications → {app} → Addons → SAML2 → Settings section

 "logout": {
   "callback": "http://somedomain.com/logout",
   "slo_enabled": true
 },

We should update the Auth0 SAML wizard

  1. Update the screenshot in step 3 (it is out of date)

    Screen Shot 2023-10-11 at 9 28 56 PM
  2. Between step 3 and 4. Add a step.

    
    Step 4: Input Logout Information

In the “Settings” section of the popup, paste the Callback URL into the field labeled "Application Callback URL". Paste the Callback JSON into the "Settings" JSON field at the bottom, just below the final curly brace "}".

Copy this Callback URL: https://{host}/{relative_path}/realms/{realm}/broker/{idp-alias}/endpoint

Copy this Callback JSON: "logout": { "callback": "https://{host}/{relative_path}/realms/{realm}/broker/{idp-alias}/endpoint", "slo_enabled": true },


<img width="573" alt="Screen Shot 2023-10-11 at 9 30 46 PM" src="https://github.com/p2-inc/idp-wizard/assets/244253/8d0d5341-f66e-4c59-929b-44b42be0b4e1">