LogoutResponse from Shib 5.1.0 causes 500 in Keycloak

Tomas Stenlund tomas.stenlund at telia.com
Mon Mar 18 17:39:52 UTC 2024


Hi,

thanks for the reply.

I have noticed now that the difference is in how the SAML message is 
sent. In Shib 5.0.0 it sends the LogoutResponse using the SAMLResponse 
field in the POST to keycloak. But in Shib 5.1.0 it sends the 
LogoutResponse using the SAMLRequest field in the POST. Hence keycloak 
doesn't like it.

Anything that can explain that behavior that I might cause due to 
misconfiguration of some sort?

Cheers,

Tomas

On 2024-03-18 13:10, Cantor, Scott wrote:
>> I just wanted to know if there has been any changes from 5.0.0 to 5.1.0
>> that would affect the logout flow on the Shib-side?
> Not materially.
>
> -- Scott
>
>
>


More information about the users mailing list