Try these log statements to see if CAS is sending your logout requests:
<!-- DEBUG service status and logout process and a lot of details -->
<AsyncLogger name="org.apereo.cas.logout" level="debug" />
<!-- INFO Performing logout operations for [TGT-...]
[number] logout requests were processed
DEBUG ST, principal and URL -->
<AsyncLogger name="org.apereo.cas.logout.DefaultLogoutManager"
level="debug">
<Filters>
<ThresholdFilter level="INFO" onMatch="ACCEPT"
onMismatch="NEUTRAL" />
<RegexFilter regex="Captured logout request.*"
onMismatch="DENY" />
</Filters>
</AsyncLogger>
<!-- DEBUG Logout request will be sent to but does not print anything
when login was through SAML 1.1 -->
<AsyncLogger
name="org.apereo.cas.logout.DefaultSingleLogoutServiceLogoutUrlBuilder"
level="debug" />
<!-- DEBUG preparing, processing and logout with URL and ST -->
<AsyncLogger
name="org.apereo.cas.logout.DefaultSingleLogoutServiceMessageHandler"
level="debug" />
<!-- DEBUG SAML logout payload -->
<AsyncLogger
name="org.apereo.cas.logout.SamlCompliantLogoutMessageCreator" level="debug" />
Check your application's access logs to see if the logout request was received.
If you are using self signed certificates, you may need to add them to your
application hosts.
Ray
On Mon, 2020-03-09 at 07:22 -0700, dg wrote:
hello,
i am using apereo cas (with https) and it works successfully single-sign on
feature with have two cas clients (with http).
when i hit /cas/logout on browser, the cas server displays logout page
successfully but there is no requests to clients and i can still access
resources after logout. i configure back channel for logout.
here is my one of cas client configuration.
{
"@class"
:
"org.apereo.cas.services.RegexRegisteredService"
,
"serviceId"
:
"http://localhost:8094/.*";
,
"name"
:
"CAS Spring Secured App"
,
"description"
:
"This is a Spring App that uses the CAS Server for it's authentication"
,
"id"
:
19991
,
"evaluationOrder"
:
1
,
"logoutType"
:
"BACK_CHANNEL"
,
"logoutUrl"
:
"http://localhost:8094/logout/custom";
}
my cas.properties file
cas.slo.disabled
=
false
cas.slo.asynchronous
=
true
do i need to add any configuration to enable single logout? because it cannot
works in this way. i couldnt find where the problem is.
thanks.
--
Ray Bon
Programmer Analyst
Development Services, University Systems
2507218831 | CLE 019 | [email protected]<mailto:[email protected]>
I respectfully acknowledge that my place of work is located within the
ancestral, traditional and unceded territory of the Songhees, Esquimalt and
WSÁNEĆ Nations.
--
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/a/apereo.org/d/msgid/cas-user/1cc0c0bc71f2d877aa9a218123204d0217ff0017.camel%40uvic.ca.
