On Sat, May 24, 2025 at 5:37 PM <[email protected]> wrote: > Thank you Mike for this answer. > I understand that Guacamole is compatible with SAML if the IdP manager > does not require a systematic disconnection. > Unfortunately, this is not my case. > I hope that single logout can be implemented very soon. > If anyone knows how to adapt Guacamole to this situation, I'd be very > grateful ... > Thanks for your help. > EL >
How is it that the IdP does not allow logins from Guacamole if it doesn't support "systematic disconnection"? My experience with SAML is that the login and logout phases are distinct phases, and I've not ever seen an IdP that refuses to log a user in to a SP based on whether or not it thinks the SP is going to support a log out phase at some unknown point in the future. Could you clarify what behavior you're seeing that leads you to believe this causes an "incompatibility?" -Nick
