We have recently integrated AEM 6.5.5 with SAML based SSO. Able to login to AEM, with SSO authentication. But we were unable to logout.
Configuration values in OSGI SAML Authentication Handler
The authentication service user has Keystore configured as well.
When the logout request generates from AEM, it is throwing as,
Note: If we hit the logout URL directly on the browser, it works fine
Logs were on trace level,
*DEBUG* com.adobe.granite.auth.saml.SamlAuthenticationHandler Private key of SP not provided: Cannot sign Authn request.*DEBUG* com.adobe.granite.auth.saml.util.SamlReader Signature verification failed for [samlp:Response: null]. No signature.
RE : com.adobe.granite.auth.saml.util.SamlReader Signature verification failed for
Either the Assertion or the Signature is missing from the SAMLRequest/SAMLResponse
Capture a HAR containing the entire network trace of the logout and base-64 decrypt the POST data to understand what is messed up.
@srikrishnank190 Thank you for reaching Adobe Experience League Community. Can you please post your SAML configuration file here?
have you checked, Handle Logout option in your SAML configuration? If it is working fine if we hit directly in the browser, it should not be an issue with IDP.