View Issue Details

IDProjectCategoryView StatusLast Update
0002346SOGoBackend Generalpublic2017-01-06 19:57
ReporterLudovic Hutin Assigned Tojraby 
PrioritynormalSeverityfeatureReproducibilityalways
Status closedResolutionopen 
Product Version2.0.5a 
Summary0002346: Single Sign Out for CAS authentification compatibily
Description

Hello,

It is possible to implement the Single Sign Out for the CAS Authentification ?

Best regards,
Ludovic.

TagsNo tags attached.

Activities

jraby

jraby

2013-06-19 12:37

viewer   ~0005660

Can you try setting SOGoCASLogoutEnabled = YES; and see if it does what it should?

Ludovic Hutin

Ludovic Hutin

2013-06-19 13:06

reporter   ~0005661

We already try this.
When you click on the "logout button" you will by logout from SOGo and from CAS but you will not be log out for other application that you have a open session.

Exemple

You log in with cas
you open session in application A
you open session in SOGo
...
You logout from SOGo
You will be logout from CAS
Session in application A is always open... :-(

=====

With Single Sign Out

You log in with cas
you open session in application A
you open session in SOGo
...
You Single Sign Out from SOGo
You will be logout from CAS
CAS Server will call "logout" function for every application you open
In this case CAS Server will call logout from application A

I hope my explication is quite enought.

Best regards,
Ludovic.

jraby

jraby

2013-06-19 14:22

viewer   ~0005664

Unless I'm mistaken, when you click the logout button in sogo, it will end up calling SOGoCASServiceURL/logout. The CAS server should then destroy the client's single sign-on CAS session and it will then do a POST to every registered services. The services should handle this POST and do any cleanup action required to logout the user correctly.

Can you verify that the above scenario is happening in your environment? When you click 'logout' application A should receive the POST request. If it doesn't, the cas logs might have some clue on why it isn't happening.

Ludovic Hutin

Ludovic Hutin

2013-06-19 14:32

reporter   ~0005665

For SOGo it's should be ok, but when you logout from application A, you will be logout from CAS BUT NOT Logout from SOGo

For each application we have to tell them that i am "compatible" with the Single Sign Out ( Exemple in PHP : https://github.com/Jasig/phpCAS/blob/master/docs/examples/example_logout.php )

And i don't think there is a "handleLogoutRequests" for SOGo in the CAS process login.

jraby

jraby

2013-06-25 14:29

viewer   ~0005692

This should be fixed with this commit: https://github.com/inverse-inc/sogo/commit/41ed498d6512b9cf2ef01654ea29be4c535d0c16

I'll close the ticket, if it still doesn't work for you, please reopen.

Issue History

Date Modified Username Field Change
2013-06-19 07:06 Ludovic Hutin New Issue
2013-06-19 12:37 jraby Note Added: 0005660
2013-06-19 13:06 Ludovic Hutin Note Added: 0005661
2013-06-19 14:22 jraby Note Added: 0005664
2013-06-19 14:32 Ludovic Hutin Note Added: 0005665
2013-06-25 14:29 jraby Note Added: 0005692
2013-06-25 14:29 jraby Assigned To => jraby
2013-06-25 14:29 jraby Status new => resolved
2017-01-06 19:57 francis Status resolved => closed