SSO integration with DX NetOps /CAPC - Logout doesn't work

[Bhanu Chandra Pendem]

Hello,

We recently integrated DX NetOps/CAPC with SSO SAML (Ping IDP) with our vanity URL, we are able to login successfully as https://vanity-url/pc/desktop/page?GroupPathIDs=1&GroupID=1 and once we click logout https://vanity-url/pc/desktop/page and stays there.

Can anyone please check and advise how can we achieve this logout? I tried all options in Ssoconfig but no luck.

[Jeffrey Pinard]

Enhancement request.

When we log out of Portal, we will log the user out of IDP if the IDP.xml has a logout URL, but then we send the user to the Portal sign in page.

There is no current option to configure where to send the user to after logout.

[Bhanu Chandra Pendem]

at IDP end, https://IDP-URL/idp/startSLO.ping was configured and other than this they will not be able to configure anything so how can we achieve this successful logout? does DX NetOps PM supports Ping IDP?

[Jeffrey Pinard]

We support Ping IDP.

The IDP.xml may define a SingleLogoutService URL.  This the logout URL we send the user's client to as part of logout.

The IDP knows the logout service URL when importing the entity info about Portal during initial setup, and sends client to that URL on IDP signout.

SO the process is:  portal sign-out.jsp -> sso sign-out.jsp -> sso saml logout servlet -> optionally IDP log out page -> sso saml logout response servlet -> sso sign-in.jsp

[Bhanu Chandra Pendem]

We are getting below error even after making sure of SLO url of IDP in IDP metadata xml. Please advise what's the issue and which files to check and correct?

Sorry for the inconvenience. Please contact your administrator for assistance and provide the reference number below to help locate and correct the problem.

[Jeffrey Pinard]

Check the sso/logs/wrapper-DATE.log for any errors.
Did you restart caperfcenter_sso service after editing IDP.xml to add SingleLogoutService entry?