<div dir="ltr">Hi Team,<div><br><div>In my application logout url is <a href="https://xyz.abc.com/Shibboleth.sso/Logout" target="_blank">https://xyz.abc.com/Shibboleth.sso/Logout</a> but when anyone suffix any url after logout <a href="https://webapps.bmc.com/Shibboleth.sso/Logout?return=https://evil.com" target="_blank" style="color:blue;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:10pt;font-family:"Courier New"">https://xyz.abc.com/Shibboleth.sso/Logout?return=https://evil.com</span></a> it redirects to the suffix page. In this case it is <a href="https://evil.com/" target="_blank">https://evil.com</a>. How we can suppress redirects into my application url. </div><div><br></div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div>Thanks<br></div><div>Vamsi Krishna</div></div></div></div></div></div>