CODEWITHSUNDEEP
springsamlsaml-2.0spring-saml
Alic
Alic

Reputation: 648

Spring Security SAML Extension - callback for Single Log Out from Idp

I am currently integrating SAML in to our web application. How do I set up my applicatoin to listen to logout request sent by IdP (when the user logout globally from another SP)?

I have read through the reference but it doesn't talk about this scenario. It only talks about global initiated by the SP.

Upvotes: 2

Views: 1736

Answers (1)

Vladimír Schäfer
Vladimír Schäfer

Reputation: 15533

Spring SAML conforms to the SAML 2.0 Single Logout profile, and the documentation says Single Logout can be initialized from any of the participaing SPs or from the IDP.

There's nothing extra you need to do, simply configure your IDP to send LogoutRequest to the /saml/SingleLogout endpoint of Spring SAML. The endpoint is defined in the default generated metadata.

Please note that only HTTP-POST and HTTP-Redirect bindings are supported for the Single Logout.

You can customize Global Logout behavior by changing LogoutHandler in the SAMLLogoutProcessingFilter.

Upvotes: 2

Related Questions