Re: [cas-user] CAS 7.1.4 - Delegated Authentication - Issue with SLO initiated by the IDP

2025-03-11 Thread Camille ALBERT
Hi Jérôme, Thank you very much for your help. We will give a try to the front-channel logout. If we had a DelegatedCasClientLogoutAction component like we have for SAML and OIDC with DelegatedSaml2ClientLogoutAction and DelegatedClientOidcLogoutAction components, do you think it would change som

Re: [cas-user] CAS 7.1.4 - Delegated Authentication - Issue with SLO initiated by the IDP

2025-03-11 Thread Jérôme LELEU
Hi, The problem with a back channel call is that the CAS (SSO session) cookie is not transmitted with the logout request so this requires to track the authentication request by an identifier and reuse the same identifier passed during the logout to be able to find back the SSO session and explicit

Re: [cas-user] CAS 7.1.1 - OIDC issue -> no information sent to redirect_uri

2025-03-11 Thread Jérôme LELEU
Hi, The behavior is the following: after the callback has been performed, the originally requested URL (generally */oidc/authorize*) is called. If the originally requested URL cannot be found in the OIDC session, the redirect URI is called instead. I guess this is what happens here. Generally, t