kiranchavala opened a new issue, #13997: URL: https://github.com/apache/cloudstack/issues/13997
### problem Within the portal, SAML accounts operate normally without any issues until the logout process. Currently, a loop is generated during sign-out, and the web browser session is never properly terminated. As a result, users must either clear their browser cache or open a new session in incognito/private mode to log in again. ### versions ACS. 4.22.x ### The steps to reproduce the bug 1. Enable Saml integration with Cloudstack 2. Login as saml user Check the session key <img width="1405" height="654" alt="Image" src="https://github.com/user-attachments/assets/72610d96-fe60-4557-9bad-0a6199197d10"; /> 2. Execute the following api https://cloudstack.apache.org/api/apidocs-4.22/apis/samlSlo.html https://your-mgmt-serverip:8080/client/api?command=samlSlo, - If your IdP exposes its own Single Logout trigger, use that (it should redirect the browser to CloudStack's samlSlo URL). Inspect the response in the Network tab - Find the command=samlSlo request. - Check its response headers: status 302, a Location header pointing at the redirect target — but no Set-Cookie header clearing JSESSIONID/userid/sessionkey (i.e. no Max-Age=0 entries for those names). ``` HTTP/1.1 302 Found Content-Type: text/xml;charset=utf-8 Location: http://10.0.32.243:8080/simplesaml/saml2/idp/SingleLogoutService.php?SAMLRequest=nZGxasMwEIb3PoXRHluWVVsWsUMhFAJphybt0KUo8iUWsSXVkk0fv0rSQOjQocvBwd333S%2FNF199F00wOGV0hdIYowi0NI3Shwq9bh9nDC3qu7kTfUcsX5uDGf0LfI7gfLQMRWnhz6ut95YnSYpjHGckJjTjDDOcONXbDk77yRmSqMYmm4Dv4ELbwDApCbFtLYpWywp1%2BGgYxdBK24wEpqLtC%2BOnI3UuzzRWYcq5EVbaeaF9hQgm%2BQyzGWFbnHNacBxuyPN3FL1dc5FTrpBUO35JUqFx0NwIpxzXogfHveSbh6c1D6PcDsYbaTpUX4Lzs3C4JfwNEM7BcHoXVJvhEAsrZAux7MzYhKPlkRIyT27RV9FzQK2W%2FxJ9lHtW3BMpMaVUZGW5k2XTUCZ3ZZFmZJ9LSKnEaUrx1X2x1T%2Ftr%2B%2BtvwE%3D Content-Length: 0 ``` <img width="1152" height="186" alt="Image" src="https://github.com/user-attachments/assets/9ec5bcd5-fcd8-4afb-9039-74f60103385d"; /> <img width="1388" height="176" alt="Image" src="https://github.com/user-attachments/assets/c5902295-59fc-473a-8318-fee9d46b0f4c"; /> 4. Login again <img width="814" height="236" alt="Image" src="https://github.com/user-attachments/assets/20380e65-0c80-4a70-b6ca-b18096e0e18b"; /> 4. Logout saml user from the ui Check the session key is not cleared <img width="1401" height="483" alt="Image" src="https://github.com/user-attachments/assets/255ae654-585d-432a-9856-b09826685738"; /> ### What to do about it? Session key should be cleared -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
