Uploaded image for project: 'Guacamole'
  1. Guacamole
  2. GUACAMOLE-1266

Implement SAML Single Logout

    XMLWordPrintableJSON

    Details

    • Type: New Feature
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: guacamole
    • Labels:
      None

      Description

      The SAML Authentication Extension does not seem to have a logout function built in. This will result in a loop. Steps to reproduce:

      • connect to guacamole ULR
      • Automatic redirect to IDP Signin Page happens
      • login via SAML IDP to Guacamole
      • Click Logoff in Guacamole
      • Redirect to Guacamole Start-Page happens
      • Redirect to IDP Signin Page
      • User gets signed in automatically as the session on the IDP is still existing

       

      The correct behaviour must be:

      • connect to guacamole ULR
      • Automatic redirect to IDP Signin Page happens
      • login via SAML IDP to Guacamole
      • Click Logoff in Guacamole
      • Redirecting to configured IDP Logoff URL
      • IDP destroys session and redirects to Guacamole start page
      • Redirect to IDP Signin Page
      • User gets signed in automatically as the session on the IDP is still existing

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                michaelmiklis Michael Miklis
              • Votes:
                1 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated: