Login URL and Logout URL hold different values and don't support SingleLogoutService

Question

Hi all,

I'm not able to do an application logout from my Jenkins (using SAML plugin).
I used the common logout URL it works fine and gives a pop up saying you may close this window. Although, I want an application logout. I want my app to redirect to Jenkins login screen

But SingleLogoutService throws error:

AADSTS750054: SAMLRequest or SAMLResponse must be present as query string parameters in HTTP request for SAML Redirect binding.

I'm following everything given here,
https://github.com/jenkinsci/saml-plugin/blob/master/doc/CONFIGURE_AZURE.md

TIA,
Shubham

Answer 1

Hi @Shubham Shrivastava ,

It looks like someone posted a Github issue related to this error and commented that the redirect needed to be updated. The issue itself is related to Workday configuration but it looks like they were able to fix this by updating the redirect URL to the one listed in the comments. https://github.com/MicrosoftDocs/azure-docs/issues/36131

Since your issue may be unique, I would recommend a support case here. If you send me an email at AzCommunity@microsoft.com and include your Subscription ID I can open a free support case for you.

What the documentation says on this:

Possible cause

Azure AD wasn’t able to identify the SAML request within the URL parameters in the HTTP request. This can happen if the application is not using HTTP redirect binding when sending the SAML request to Azure AD.

Resolution

The application needs to send the SAML request encoded into the location header using HTTP redirect binding. For more information about how to implement it, read the section HTTP Redirect Binding in the SAML protocol specification document.