For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

igorzhuk's avatar
igorzhuk
Icon for Altostratus rankAltostratus
Jun 06, 2018

Saml Logout from IDP and redirect

Hi I My BigIP is SP My Logout URI is /logout when client request /logout I create a irule for logout and close APM session

when HTTP_REQUEST {             if { [string tolower [HTTP::uri]] contains "/logout" } {                 ACCESS::session remove                ACCESS::respond 302 Location "http://OtherHost.com/" "Set-Cookie" "MRHSession=0; expires=Tuesday, 29-Mar-1970 00:15:00 GMT" "Connection" "Close"             }    }

but after client won't connect again after 1 min it automatically connected without credentials because i think the IDP doesn't do logout POST? how can I fix that ?

application delivery
BIG-IP Access Policy Manager (APM)

1 Reply

  • youssef1's avatar
    youssef1
    Icon for Cumulonimbus rankCumulonimbus
    Jun 06, 2018

    Hi,

    try this:

    when HTTP_REQUEST { 
if { [string tolower [HTTP::uri]] contains "/logout" } { 
ACCESS::respond 302 noserver Location "/vdesk/hangup.php3"
return
}
}

    If you set correctly apm part (SLS and SLR) you will be redirect automaticly to your IDP in order to logout then return to app.

    Keep me in touch.

    Regards