SAML Logout Not Redirecting to returnTo URL - Stuck on Screen that Says OK

Overview

The customer is using a SAML connection in one Auth0 tenant (SP tenant) to connect to another Auth0 tenant with the SAML addon (IdP tenant). They are trying to logout of both the SP and IdP, but are not getting redirected back to the 'returnTo' URL after getting logged out of the IdP. They are just being left on a white screen that says "OK".
rtaImage.jpeg 

Applies To
  • SAML Connection
  • Single Logout
Cause

The SP tenant's logout request was initiated using their custom domain, however, the IdP tenant was configured to use the canonical domain as the logout.callback value configured in the SAML Web App Addon. 

 

Troubleshooting

SP logout request does include returnTo and federated parameters:

https://{CUSTOM_DOMAIN}/v2/logout?
returnTo=http%3A%2F%2Flocalhost%3A3000&
client_id=****&
auth0Client=*****&
federated



SAML Web App Addon config:

{
  "logout": {
    "callback": "https://{CANONICAL_DOMAIN}/logout",
    "slo_enabled": true
  }
}


SAML Connection has Sign Out enabled, and is using the correct Sign Out URL.
 

 

Solution
If the custom domain from the SP tenant is used to begin the SAML logout flow, then the IdP needs to be configured to use the custom domain as well for the Single Logout Service URL, or else the final redirect to the 'returnTo' URL will not occur. 

Recommended content

No recommended content found...