Bug 57464 - missing configuration option for post_logout_redirect_uri
Summary: missing configuration option for post_logout_redirect_uri
Status: NEW
Alias: None
Product: UCS
Classification: Unclassified
Component: OpenID Connect
Version: UCS 5.0
Hardware: Other Linux
: P5 normal
Target Milestone: ---
Assignee: UCS maintainers
QA Contact: UCS maintainers
URL:
Keywords:
Depends on: 57466
Blocks:
  Show dependency tree / graph
 
Reported: 2024-07-24 09:40 CEST by Tim Breidenbach
Modified: 2024-07-31 11:17 CEST (History)
3 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Customer ID: 02149
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Tim Breidenbach univentionstaff 2024-07-24 09:40:15 CEST 
Logging out from the portal you may want to redirect to any site. 
In a customer project we have two idps and want to redirect to the second (not the one which is configured as IDP for the portal).

We would need a configuration option for "post_logout_redirect_uri".


Some informations here:
https://www.keycloak.org/docs/25.0.2/server_admin/#_oidc-logout

https://openid.net/specs/openid-connect-rpinitiated-1_0.html#RedirectionAfterLogout
Comment 1 Jan-Luca Kiok univentionstaff 2024-07-24 13:41:06 CEST 
Just for completeness: The spec as well as Keycloak only talk about a post logout redirect for the RP-Initiated logout, not for front- or backchannel logouts.
This is also your request?
Comment 2 Marius Meschter univentionstaff 2024-07-25 10:23:08 CEST 
Wouldn't umc/logout/location suffice for this? Otherwise I created #57466 which would be a prerequisite to let the user set the `post_logout_redirect_uri`.
Comment 3 Tim Breidenbach univentionstaff 2024-07-31 11:17:50 CEST 
Sory i didnt know this UCR.

umc/logout/location works for me (i only testet frontchannel-logout).