Static logout URL in IDP initiated SLO

XMLWordPrintable

    • 1
    • 5

      Customer would like to have a static logout URL that could be requested to Jira to logout, initiated from IDP to perform SLO. At present, logout url is dynamic which consist of atl_token i.e xsrf token and thus it cannot be added/configured in IDP unlike confluence where logout url is static.

      • In order to implement a proper SSO logout across all applications where the user is logged in, the IdP has the list of the "Logout URIs" for those applications.
      • When the user logs out from one application, the IdP performs a set of callbacks and logs out the user from each of the applications.
      • The Logout URI for Confluence is rather static: "/confluence/logout.action" and it can be configured in the IdP.
      • The Logout URI for Jira is unfortunately dynamic: "/jira/logout?atl_token=....", where the atl_token is specific for the current session. This dynamic URL cannot be configured as Logout URI in the IdP and hence a SSO Logout across all applications cannot be achieved.

              Assignee:
              Unassigned
              Reporter:
              Sandip Shrivastava
              Votes:
              8 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated: