SAML 2.0 Logout issue

[sudeepKonjeti]

I am working on SAML2.0 Login functionality works fine but the Logout is not happening properly. I have given the IDP url for logout. and tried giving "/system/sling/logout.html" and "/system/sling/logout.html?resource=/aem" its redirecting back to home page of /aem/start.html. I dont see proper documentation specifying steps to configure logout.

can someone please mention step by step to configure logout properly for author instance of aem. where to configure /system/sling/logout.html and possibilities to acheive the logout. Any dispatcher configurations need to be added?

[konstantyn_diachenko · Accepted solution]

Hi @sudeepKonjeti ,

I haven't found official documentation, but I see several topics on the forum. Take a look into them:
- https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/saml-log-out-aem-as-a-clou...

- https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/how-to-make-saml-authentic...

Additionally, I checked com.adobe.granite.auth.saml.SamlAuthenticationHandler OSGI configuration and it has several configuration that are related to logout. I would assume you need to configure them:
- Handle Logout - Whether or not logout (dropCredentials) requests will be processed by this handler. (handleLogout)

- Logout URL - URL of the IDP where the SAML Logout Request should be sent to. If this property is empty the authentication handler won't handle logouts. (logoutUrl)

Best regards,

Kostiantyn Diachenko.

[kautuk_sahni]

@sudeepKonjeti Just checking in — were you able to resolve your issue?
We’d love to hear how things worked out. If the suggestions above helped, marking a response as correct can guide others with similar questions. And if you found another solution, feel free to share it — your insights could really benefit the community. Thanks again for being part of the conversation!