CAS version - 6.4.4.1 
Java Version: 11.0.12

I'm getting a 500 error on logout when using delegated authentication to a 
third-party SAML IdP. 

The initial error is:
org.springframework.webflow.execution.ActionExecutionException: Exception 
thrown executing 
org.apereo.cas.web.flow.DelegatedAuthenticationClientLogoutAction@290aa707 
in state 'terminateSession' of flow 'logout' -- action execution attributes 
were 'map[[empty]]'

which eventually gets to:
Caused by: org.pac4j.saml.exceptions.SAMLException: Identity provider has 
no single logout service available for the selected profile 
urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST 

I checked the IdP metadata, and sure enough, all lines for 
SingleLogoutService have been commented out. Is there a setting I can use 
locally to override this? I tried setting cas.slo.disabled=true, but I'm 
still getting the same error. I've been looking through the documentation 
for a setting to address this, but I can't seem to find it. Any help would 
be appreciated.

Thanks,
Noelette

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/05b9c109-73af-4669-ab75-c58eac14cf2fn%40apereo.org.

Reply via email to