Skip to content

Fix for LogoutRequest to ADFS#91

Open
ktreimann wants to merge 1 commit into
justinbleach:masterfrom
ktreimann:ADFS-LogoutRequest-fix
Open

Fix for LogoutRequest to ADFS#91
ktreimann wants to merge 1 commit into
justinbleach:masterfrom
ktreimann:ADFS-LogoutRequest-fix

Conversation

@ktreimann
Copy link
Copy Markdown

  • ADFS would not accept the LogoutRequest without a Destination attribute
  • If an Assertion Subject NameID had a Format, the Format must be included in the LogoutRequest in order to match the principal at the IDP
  • The SessionIndex should be included in the LogoutRequest to terminate the correct session
  • Added a redirectToIdentityProvider method to capture this additional information

This has been tested with ADFS on Windows Server 2016.

- ADFS would not accept the LogoutRequest without a Destination attribute
- If an Assertion Subject NameID had a Format, the Format must be included in the LogoutRequest in order to match the principal at the IDP
- The SessionIndex should be included in the LogoutRequest to terminate the correct session
- Added a redirectToIdentityProvider method to capture this additional information
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant