Logout fails with SSO and adfs

[benedikt_w]

Dear community,

we are running our launchpad on SCP NEO and we are using SSO with adfs. Now we have noticed, that the logout is not working propery. The goodbye page is shown, but sometimes the session is still alive. This means, if you open the launchpad again, the system does not ask for your credentials. It seems the logout works randomly, but most of the time you still have an active session.

We used the tool "saml tracker" to record a logout that was successful and a logout that failed. As you can see, there are two additional requests if the logout was successful.

We also double checked our SCP NEO configuration, but everything looks fine.

Do you have any ideas what we could try next to solve this issue?

Thanks in advance,

Ben

[former_member269672]

Hello Benedikt,

In the non-working case, you can see that SAP has sent Logout Request(URL parameter SAMLRequest) to your Identity Provider. However, the Identity Provider did not seem to respond to the Logout Request. Logout Response from IDP is missing. The session at IDP side was not terminated. My suggestion is to check the logs at IDP side in order to find out why IDP is not sending the Logout Response in some cases.

Best regards,

Desislava