Configuration considerations to log out to an external portal using SAML 2.0
Secure Proxy can be configured to enable navigation to the log out page of an external portal during a SSO SAML 2.0-based authentication session.
-
Trading partner logs out from myFilegateway application and is redirected to an IdP log out URL as configured in Secure Proxy (see Logout Portal). Trading partner successfully logs out of the SSO session.
To enable this flow, ensure that .redirect.to.idp.logout is set to true (default) to logout from the SSO session. To verify attribute value see, SSO Configuration - Properties> . redirect.to.idp.logout =true .
It is recommended you configure the external idP settings appropriately to ensure SSO logout functions as expected.
-
Trading partner logs out from a myFilegateway session and is able to reconnect to the application without re- authenticating and continue operations.
Attention: This option may not provide adequate security because despite logging out of myFilegateway, one can continue to access applications that accept SSO session cookies without having to login again. Use this option only when it is certain that doing so does not create a security risk.In this scenario, be aware of the following considerations:
The external IdP assumes that the trading partner is currently logged in. The IdP sends an AuthnResponse to Secure Proxy without the user authenticating it with IdP.
In this scenario to successfully logout from myFilegateway, ensure that you have set .redirect.to.idp.logout to false. To verify attribute value see, SSO Configuration - Properties>. redirect.to.idp.logout =false
Note: To completely log out from the SSO session, ensure that you have logged out from the IdP as well.