Static logout URL in IDP initiated SLO

XMLWordPrintable

    • 2
    • 5

      Customer would like to have a static logout URL that could be requested to Jira to logout, initiated from IDP to perform SLO. At present, logout url is dynamic which consist of atl_token i.e xsrf token and thus it cannot be added/configured in IDP unlike confluence where logout url is static.

      • In order to implement a proper SSO logout across all applications where the user is logged in, the IdP has the list of the "Logout URIs" for those applications.
      • When the user logs out from one application, the IdP performs a set of callbacks and logs out the user from each of the applications.
      • The Logout URI for Confluence is rather static: "/confluence/logout.action" and it can be configured in the IdP.
      • The Logout URI for Jira is unfortunately dynamic: "/jira/logout?atl_token=....", where the atl_token is specific for the current session. This dynamic URL cannot be configured as Logout URI in the IdP and hence a SSO Logout across all applications cannot be achieved.

            Assignee:
            Unassigned
            Reporter:
            Sandip Shrivastava
            Votes:
            8 Vote for this issue
            Watchers:
            8 Start watching this issue

              Created:
              Updated: