[keycloak-user] SAML logout request document mapping fails

[Manuel Waltschek]

Hello,

I am using keycloak for identity brokering with wildfly. There are some Problems I experience with the logout. First: a call to HttpRequest.logout() does not trigger anything. I need to redirect to myurl?GLO=true too to actually do a logout. Maybe the documentation is wrong?

The one thing that is even worse is that I can't do IdP initiated logout, since the document-object mapping does not work. It does not decrypt the cipher value and therefore every value is null, resulting in a NPE in org.keycloak.broker.saml.SAMLEndpoint.Binding.logoutRequest(LogoutRequestType, String) line 282.

Im using wildfly10 and keycloak 4.8.3.Final. Please do not ignore me again, since this is blocking us for a long time now. I really need someone figuring that one out.

Thanks and regards,


[Logo]

Manuel Waltschek BSc.

+43 660 86655 47<tel:+436608665547>
manuel.waltschek at prisma-solutions.at<mailto:manuel.waltschek at prisma-solutions.at>
https://www.prisma-solutions.com

PRISMA solutions EDV-Dienstleistungen GmbH
Klostergasse 18, 2340 Mödling, Austria
Firmenbuch: FN 239449 g, Landesgericht Wiener Neustadt
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 6418 bytes
Desc: image001.png
Url : http://lists.jboss.org/pipermail/keycloak-user/attachments/20190321/ea7b11b1/attachment-0001.png