Bug 54046 – SAML Logout causes UNHANDLEDEXCEPTION

Bug 54046 - SAML Logout causes UNHANDLEDEXCEPTION


Summary:	SAML Logout causes UNHANDLEDEXCEPTION

Status:	NEW

Product:	UCS
Classification:	Unclassified
Component:	SAML
Version:	UCS 4.4
Hardware:	Other Linux

Importance:	P5 normal (vote)
Target Milestone:	---
Assigned To:	UCS maintainers
QA Contact:	UCS maintainers

URL:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2021-11-10 10:23 CET by Oliver Friedrich
Modified:	2021-11-10 10:25 CET (History)
CC List:	0 users

See Also:	49532
What kind of report is it?:	Bug Report
What type of bug is this?:	4: Minor Usability: Impairs usability in secondary scenarios
Who will be affected by this bug?:	2: Will only affect a few installed domains
How will those affected feel about the bug?:	2: A Pain – users won’t like this once they notice it
User Pain:	0.091
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):	Error handling
Max CVSS v3 score:

Attachments
SAML-Tracer export of Logout (137.18 KB, application/json) 2021-11-10 10:23 CET, Oliver Friedrich	Details
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Oliver Friedrich

2021-11-10 10:23:51 CET

Created attachment 10862 [details]
SAML-Tracer export of Logout

Steps to reproduce:
1. Add samltest.id as SAML SP and allow testuser to use it
2. Go to https://samltest.id/start-idp-test/ and put in the data of your SAML IDP (<url>/simplesamlphp/saml2/idp/metadata.php)
3. Log in as testuser
4. SAMl roundtrip works, we're send back to https://samltest.id/saml-test/
5. Click on SAML Logout there

```
0 www/saml2/idp/SingleLogoutService.php:23 (N/A)
1 modules/saml/lib/IdP/SAML2.php:580 (sspmod_saml_IdP_SAML2::receiveLogoutMessage)
2 lib/SimpleSAML/IdP.php:516 (SimpleSAML_IdP::handleLogoutResponse)
3 lib/SimpleSAML/IdP/TraditionalLogoutHandler.php:117 (SimpleSAML\IdP\TraditionalLogoutHandler::onResponse)
4 lib/SimpleSAML/IdP/TraditionalLogoutHandler.php:46 (SimpleSAML\IdP\TraditionalLogoutHandler::logoutNextSP)
5 lib/SimpleSAML/IdP.php:458 (SimpleSAML_IdP::finishLogout)
6 modules/saml/lib/IdP/SAML2.php:519 (sspmod_saml_IdP_SAML2::sendLogoutResponse)
7 lib/SimpleSAML/Configuration.php:1219 (SimpleSAML_Configuration::getEndpointPrioritizedByBinding)
Backtrace:
Caused by: Exception: saml20-sp-remote/'https://samltest.id/saml/sp'['SingleLogoutService']:Could not find a supported SingleLogoutService endpoint.
0 [builtin] (N/A)
1 www/_include.php:17 (SimpleSAML_exception_handler)
Backtrace:

SimpleSAML_Error_Error: UNHANDLEDEXCEPTION
```