I think cas.logout.redirect-url would do what you need. Set it to your SAML2 IDP logout url
On Thu, Apr 21, 2022 at 5:32 AM Migue Jaramago <jaramago...@gmail.com> wrote: > Hello, > > I'm using CAS 6.4.6 > > > I have the structure: [application] -> [cas6] -> [SAML2 Idp]. > The CAS6 server is configured to delegate authentication, using pac4j > libraries, and it's working fine. > The problem that I'm trying to solve is when the user asks for logout. I > need that the user ends its session on Application, CAS6 and SAML2-Idp. > > The following steps shows the problem: > 1 - User is logged in application, CAS6 and SAML2-Idp. > 2 - User logout the application, and the application redirects the user to > CAS6 logout > 3 - CAS6 logouts the user. > 4 - The user not close the browser and try access again to Application, > then Application redirects to CAS6 to login again > 5 - CAS6 redirects the user to SAML2-Idp > 6 - SAML2-Idp still has a valid SSO session to user, that is, redirect to > CAS6 authenticated > 7 - CAS6 creates the tickets and redirects to Application > 8 - User is logged in > > > > How can I configure CAS6, when the user is logging out, to tell SAML2-Idp > to end its session or redirects to SAML2-Idp to logout, and get back to the > login screen? > > -- > - Website: https://apereo.github.io/cas > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fapereo.github.io%2fcas&c=E,1,MCDqD0VbrWgfQLHdBoJTjkNk65qqm-eE2p35k9YVrLeAS-DC1EfMFNgHCvbhBrwZZ3mhCBtymEYd6oYz2WOD2e6HqzuHlezDlvwCqYR9AbK0vw,,&typo=1> > - Gitter Chatroom: https://gitter.im/apereo/cas > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgitter.im%2fapereo%2fcas&c=E,1,Z4kOEQS1Xmvt-TSxCNTpkrxIXBjsFY_4oHcrMN0zslNi4RAHDt0c9Chuh35rK6kANhpM00TNhu1Its5xU-OK2x059WUcsMPFVsGbTR_p6HxECyGoBg,,&typo=1> > - List Guidelines: https://goo.gl/1VRrw7 > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgoo.gl%2f1VRrw7&c=E,1,jmrEBWSUcp5Pa0nS4YHaGM5w0-QekzQZSLi4eCQnH3TxGneJ4cVQuR9hELbSZOAtf1L9yXQH2wtKx1CEfKzFpIYAo8DkVWkkmMxfoBQWaPicwUwlHvUjtH-x&typo=1> > - Contributions: https://goo.gl/mh7qDG > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgoo.gl%2fmh7qDG&c=E,1,qQ-f-1KvvspXCxYuy_7EcjEsG6LHfmji_MWd6Wzm2gyMcmpejZYUYDWwhSo28w1wuddTRk6raptyis1pqAryjl0UOQGkXMGPD1MNgG1y&typo=1> > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to cas-user+unsubscr...@apereo.org. > To view this discussion on the web visit > https://groups.google.com/a/apereo.org/d/msgid/cas-user/31aad474-5ebb-4147-9c39-b331e4173404n%40apereo.org > <https://linkprotect.cudasvc.com/url?a=https%3a%2f%2fgroups.google.com%2fa%2fapereo.org%2fd%2fmsgid%2fcas-user%2f31aad474-5ebb-4147-9c39-b331e4173404n%2540apereo.org%3futm_medium%3demail%26utm_source%3dfooter&c=E,1,DQem5etCnXMmKi7TZGA0jI9DBEAkYpbWVOW35nwU5Hb9dZeDAREctuHzeINWZpSkpBB1Kd6gl883jv1QDFw6WAbzNiHd4jh8eo5f3QbjAOUY7UF-cIN0&typo=1> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to cas-user+unsubscr...@apereo.org. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2BakFRyp80iD4pQqwis8TdbkjBW%2B6teyDYN%2BxCG-2GmZq%3DUagA%40mail.gmail.com.
