There are 4 comments.
 
 
OpenId Connect / cid:jira-generated-image-avatar-edbf125a-0bb1-4d2a-a2c6-d987ea8d4ed5 OIDC-320 Open

Allow disabling the logout on provider side

 
View issue   ยท   Add comment
 

4 comments

 
cid:jira-generated-image-avatar-296ab5c3-b9f9-4da0-bdb0-04a89ff66465 Thomas Mortagne on 29/Sep/26 10:46
 

Our actual problem was a logout that immediately logged the user back in silently

That would suggest the information about the logout endpoint which is supposed to be indicated in the provider discovery endpoint is wrong. If you do want to be logged out, I don't understand why you were trying to disable the very mechanism in charge of doing that.

 
cid:jira-generated-image-avatar-296ab5c3-b9f9-4da0-bdb0-04a89ff66465 Thomas Mortagne on 29/Sep/26 10:47
 
bq. Our actual problem was a logout that immediately logged the user back in silently

That would suggest the information about the logout endpoint which is supposed to be indicated in the provider discovery endpoint is wrong. If you do want to be logged out
on the provider when you logout on XWiki , I don't understand why you were trying to disable the very mechanism in charge of doing that.
 
cid:jira-generated-image-avatar-296ab5c3-b9f9-4da0-bdb0-04a89ff66465 Thomas Mortagne on 29/Sep/26 10:54
 
bq. Our actual problem was a logout that immediately logged the user back in silently

That would suggest the information about the logout endpoint which is supposed to be indicated in the provider discovery endpoint is wrong
(or maybe you just did not provide the provider's main endpoint in the configuration) . If you do want to be logged out on the provider when you logout on XWiki, I don't understand why you were trying to disable the very mechanism in charge of doing that.
 
cid:jira-generated-image-avatar-296ab5c3-b9f9-4da0-bdb0-04a89ff66465 Thomas Mortagne on 29/Sep/26 10:55
 
bq. Our actual problem was a logout that immediately logged the user back in silently

That would suggest the information about the logout endpoint which is supposed to be indicated in the provider discovery endpoint is wrong (or maybe you just did not provide the provider's main
endpoint URL in the configuration). If you do want to be logged out on the provider when you logout on XWiki, I don't understand why you were trying to disable the very mechanism in charge of doing that.