-
Bug
-
Resolution: Fixed
-
Neutral
-
None
-
None
-
Empty show more show less
-
Yes
-
Global Maintenance 2
-
3
Steps to reproduce
- Install SSO module
- Configure against Microsoft Azure
- Login to the system
- Logout
Expected results
post_logout_redirect_uri parameter is successfully recognized by Azure as correct reply url
Actual results
post_logout_redirect_uri parameter is wrong (not the one configured as reply url but the request.getRequestURL() value)
Workaround
N/A
Development notes
The value added is based on request.getRequestURL(). This is not correct in many cases.
E.g. we have tomcat running on http and nginx running SSL. tomcat doesn't know about ssl and identifies request.getRequestURL() as http url.
post_logout_redirect_uri value should be based on whatever is configured via "authenticationService.path"
Acceptance criteria
- causes
-
MGNLSSO-95 DOC: Update SSO yaml configuration for postLogoutRedirectUri
- Closed