[keycloak-user] Keycloak single Log Out not working

[Triveni Chegireddy]

Hi,


I have few applications, i.e. one Spring Boot application using keycloak 
specific java starter, another jira and confluence applications protected 
using Miniorange plugin from Atlassian and another jenkins application 
protected
using keycloak specific plugin from Jenkins available plugins for single 
sign on and single Logout out. The SSO works fine on all applications. 
However, the problem occurs in case of Logout. Below are my observations:

1. When I perform logout on java application, then jira, confluence and 
jenkins application still works as normal rather than asking for login 
again on next request. 
2. And when I perform logout from Jira, then Confluence is getting 
redirected to Login page on next request but the Spring boot application 
works as normal.
3. When I see keycloak admin console, on logout of any application all the 
sessions of all opened clients in the Realm are killed, but applications 
are working normal instead of redirecting to Login page.
4. As per the keycloak documentation,Admin URL shall be set for a 
particular client that can be used by Keycloak
server to send backend requests to the application for logout users. 

Any idea/help in this regard will be much appreciated. Many thanks.


Regards
Triveni Chegireddy
Tata Consultancy Services Limited
Mailto: triveni.chegireddy at tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty.   IT Services
                        Business Solutions
                        Consulting
____________________________________________




From:   Triveni Chegireddy/LATAM/TCS
To:     keycloak-user at lists.jboss.org
Date:   09/11/2018 04:30 PM
Subject:        Re: Keycloak single Log Out not working


Hi All,

The below issue is blocking in our application. Could anyone help us in 
resolving the Single Logout issue.

Regards
Triveni Chegireddy
Tata Consultancy Services Limited
Mailto: triveni.chegireddy at tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty.   IT Services
                        Business Solutions
                        Consulting
____________________________________________





From:   Triveni Chegireddy/LATAM/TCS
To:     keycloak-user at lists.jboss.org
Date:   09/07/2018 12:42 PM
Subject:        Keycloak single Log Out not working


Hi Team,

I am securing many tools using Keycloak for Single sign on and Single 
Logout. We are securing tools like Jira, Confluence using Miniorange 
plugin. We have few Spring boot applications which are to be secured. They 

are secured using Spring Boot with KeycloakWebSecurityConfigurerAdapter. 
Single Sign on is working fine. The landing application is spring boot web 

application, which is accessed by giving LDAP credentials. From that 
application, we will be accessing the Jira, Confluence. They are opened 
without asking me for credentials. But Single Logout is not working. In 
Spring boot application, on click of Logout, I am calling 
HttpServletRequest.logout(), which is logging me out of Spring boot 
application successfully. But the sessions in Jira and Confluence are not 
killed. Similarly once I open the tools from Spring boot application, on 
logout of any tools both Jira and confluence are logging out using Single 
Logout but session in Spring boot application is not killed.

Could you please help us resolving this issue.


Regards
Triveni Chegireddy
Tata Consultancy Services Limited
Mailto: triveni.chegireddy at tcs.com
Website: http://www.tcs.com
____________________________________________
Experience certainty.   IT Services
                        Business Solutions
                        Consulting
____________________________________________

=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you