LogoutResponse from Shib 5.1.0 causes 500 in Keycloak
Tomas Stenlund
tomas.stenlund at telia.com
Mon Mar 18 17:39:52 UTC 2024
Hi,
thanks for the reply.
I have noticed now that the difference is in how the SAML message is
sent. In Shib 5.0.0 it sends the LogoutResponse using the SAMLResponse
field in the POST to keycloak. But in Shib 5.1.0 it sends the
LogoutResponse using the SAMLRequest field in the POST. Hence keycloak
doesn't like it.
Anything that can explain that behavior that I might cause due to
misconfiguration of some sort?
Cheers,
Tomas
On 2024-03-18 13:10, Cantor, Scott wrote:
>> I just wanted to know if there has been any changes from 5.0.0 to 5.1.0
>> that would affect the logout flow on the Shib-side?
> Not materially.
>
> -- Scott
>
>
>
More information about the users
mailing list