Forum Discussion

igorzhuk's avatar
igorzhuk
Icon for Altostratus rankAltostratus
Jun 06, 2018

Saml Logout from IDP and redirect

Hi I My BigIP is SP My Logout URI is /logout when client request /logout I create a irule for logout and close APM session

when HTTP_REQUEST {             if { [string tolower [HTTP::uri]] contains "/logout" } {                 ACCESS::session remove                ACCESS::respond 302 Location "http://OtherHost.com/" "Set-Cookie" "MRHSession=0; expires=Tuesday, 29-Mar-1970 00:15:00 GMT" "Connection" "Close"             }    }

but after client won't connect again after 1 min it automatically connected without credentials because i think the IDP doesn't do logout POST? how can I fix that ?

application delivery
BIG-IP Access Policy Manager (APM)
  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jun 06, 2018

    Hi,

    try this:

    when HTTP_REQUEST { 
if { [string tolower [HTTP::uri]] contains "/logout" } { 
ACCESS::respond 302 noserver Location "/vdesk/hangup.php3"
return
}
}

    If you set correctly apm part (SLS and SLR) you will be redirect automaticly to your IDP in order to logout then return to app.

    Keep me in touch.

    Regards