AD FS - signout not always completing
we have problem users adfs session doesn't complete when log out.
the samlsession cookie still present in browser , when accessing site again not prompted login credentials.
usually when starting new login, access site, log out sequence first go through completes , signs out properly. when repeated session sticks. closing , restarting appears fix again.
tracking logout fiddler shows complete signout sequence has , post (done form submitted javascript), incomplete sequence returns "you have signed out" page.
the problem isn't browser specific - happens in chrome , ie.
incomplete logout - cookie cleared.
| # | result | protocol | host | url | body | caching | content-type | process | comments | custom | requestmethod |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 3 | 200 | https | sso.viopoc.com | /adfs/ls/?wa=wsignout1.0 | 4,177 | text/html; charset=utf-8 | iexplore:12380 | [#3] | get | ||
| 4 | 200 | https | sso.viopoc.com | /adfs/ls/?wa=wsignout1.0 | 6,539 | no-cache,no-store; expires: -1 | text/html; charset=utf-8 | iexplore:12380 | [#4] | post |
incomplete logout - cookie not cleared
| # | result | protocol | host | url | body | caching | content-type | process | comments | custom | requestmethod |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2 | 200 | https | sso.viopoc.com | /adfs/ls/?wa=wsignout1.0 | 6,539 | no-cache,no-store; expires: -1 | text/html; charset=utf-8 | iexplore:12380 | [#2] | get |
the only difference in 2 /adfs/ls/?wa=wsignout1.0 get requests incomplete request passes samllogout cookie - same value returned in first go through.
is cookie cause ? should code remove ?
john reidy sydney, australia
hi,
thanks post.
it looks query more related adfs feature part, our forum doesn’t focus on. dedicated support, suggest open new thread query in our adfs forum, understanding appreciated.
the reason why recommend posting appropriately qualified pool of respondents, , other partners read forums regularly can either share knowledge or learn interaction us.
i have found 1 related article of adfs signout action, here link reference:
ad fs: how invoke ws-federation sign-out
http://social.technet.microsoft.com/wiki/contents/articles/1439.ad-fs-how-to-invoke-a-ws-federation-sign-out.aspx
thanks understanding.
best regards,
alvin wang
please remember mark replies answers if , unmark them if provide no help.
if have feedback technet subscriber support, contact tnmff@microsoft.com.
Windows Server > Directory Services
Comments
Post a Comment