{"action":"created","issue":{"url":"https://api.github.com/repos/chrodriguez/redmine_omniauth_saml/issues/10","repository_url":"https://api.github.com/repos/chrodriguez/redmine_omniauth_saml","labels_url":"https://api.github.com/repos/chrodriguez/redmine_omniauth_saml/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/chrodriguez/redmine_omniauth_saml/issues/10/comments","events_url":"https://api.github.com/repos/chrodriguez/redmine_omniauth_saml/issues/10/events","html_url":"https://github.com/chrodriguez/redmine_omniauth_saml/issues/10","id":154855840,"number":10,"title":"Logout function not working ","user":{"login":"parakrama","id":1388658,"avatar_url":"https://avatars.githubusercontent.com/u/1388658?v=3","gravatar_id":"","url":"https://api.github.com/users/parakrama","html_url":"https://github.com/parakrama","followers_url":"https://api.github.com/users/parakrama/followers","following_url":"https://api.github.com/users/parakrama/following{/other_user}","gists_url":"https://api.github.com/users/parakrama/gists{/gist_id}","starred_url":"https://api.github.com/users/parakrama/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/parakrama/subscriptions","organizations_url":"https://api.github.com/users/parakrama/orgs","repos_url":"https://api.github.com/users/parakrama/repos","events_url":"https://api.github.com/users/parakrama/events{/privacy}","received_events_url":"https://api.github.com/users/parakrama/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-05-14T14:13:13Z","updated_at":"2016-10-28T16:06:57Z","closed_at":null,"body":"Hi \r\n\r\nSSO function works perfectly  fine , but when user try to signout from redmine  , its not working \r\n\r\nsaml.rb file\r\n=========\r\n\r\n```\r\nRedmine::OmniAuthSAML::Base.configure do |config|\r\n  config.saml = {\r\n    :assertion_consumer_service_url => \"https://redminesso.ihk.com/auth/saml/callback\", # The redmine application hostname\r\n    :issuer                         => \"https://redminesso.ihk.com\",                 # The issuer name\r\n    :idp_sso_target_url             => \"https://172.16.2.14:9443/samlsso\", # SSO login endpoint\r\n    :idp_cert_fingerprint           => \"6B F8 E1 36 EB 36 D4 A5 6E A0 5C 7A E4 B9 A4 5B 63 BF 97 5D\", # SSO ssl certificate fingerprint\r\n    :name_identifier_format         => \"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\",\r\n    :signout_url                    => \"https://172.16.2.14:9443/samlsso\",\r\n    :idp_slo_target_url             => \"https://172.16.2.14:9443/samlsso\",\r\n    :name_identifier_value          => \"mail\", # Which redmine field is used as name_identifier_value for SAML logout\r\n    :attribute_mapping              => {\r\n       :login      => 'http://wso2.org/claims/emailaddress',\r\n       :firstname  => 'http://wso2.org/claims/givenname',\r\n       :lastname   => 'http://wso2.org/claims/lastname',\r\n       :mail       => 'http://wso2.org/claims/emailaddress'\r\n    }\r\n\r\n}\r\n\r\n  config.on_login do |omniauth_hash, user|\r\n    # Implement any hook you want here\r\n  end\r\nend\r\n```\r\n\r\nAuthentication Saml response it properly have the Session index value\r\n```\r\n </saml2:SubjectConfirmation>\r\n        </saml2:Subject>\r\n        <saml2:Conditions NotBefore=\"2016-05-14T13:37:03.639Z\"\r\n                          NotOnOrAfter=\"2016-05-14T13:42:03.639Z\"\r\n                          >\r\n            <saml2:AudienceRestriction>\r\n                <saml2:Audience>https://redminesso.ihk.com</saml2:Audience>\r\n            </saml2:AudienceRestriction>\r\n        </saml2:Conditions>\r\n        <saml2:AuthnStatement AuthnInstant=\"2016-05-14T13:37:03.641Z\"\r\n                              SessionIndex=\"2fffb2d6-38b9-453a-ac73-e99a4bb06487\"\r\n                              >\r\n            <saml2:AuthnContext>\r\n\r\n```\r\n\r\nBut when generating the Logout request SAML response dont have the Session index value \r\n\r\n```\r\n<samlp:LogoutRequest Destination=\"https://172.16.2.14:9443/samlsso\"\r\n                     ID=\"_eb506f40-fc06-0133-8f7c-0050569a3be9\"\r\n                     IssueInstant=\"2016-05-14T13:37:26Z\"\r\n                     Version=\"2.0\"\r\n                     xmlns:saml=\"urn:oasis:names:tc:SAML:2.0:assertion\"\r\n                     xmlns:samlp=\"urn:oasis:names:tc:SAML:2.0:protocol\"\r\n                     >\r\n    <saml:Issuer>https://redminesso.ihk.com</saml:Issuer>\r\n    <saml:NameID Format=\"urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress\">mail</saml:NameID>\r\n</samlp:LogoutRequest>\r\n```\r\n\r\n\r\nAnd from the IDP side it print the following log \r\n\r\n```\r\nTID: [-1234] [] [2016-05-14 19:07:26,101] ERROR {org.wso2.carbon.identity.sso.saml.processors.SPInitLogoutRequestProcessor} -  Session Index validation for Logout Request failed. Received: [null]. Expected: [2fffb2d6-38b9-453a-ac73-e99a4bb06487]\r\n```\r\n\r\nCan you please advice regarding this , is it due reconfiguration of saml.rb or its due to bug ?"},"comment":{"url":"https://api.github.com/repos/chrodriguez/redmine_omniauth_saml/issues/comments/256961045","html_url":"https://github.com/chrodriguez/redmine_omniauth_saml/issues/10#issuecomment-256961045","issue_url":"https://api.github.com/repos/chrodriguez/redmine_omniauth_saml/issues/10","id":256961045,"user":{"login":"rozmarbeka","id":1408517,"avatar_url":"https://avatars.githubusercontent.com/u/1408517?v=3","gravatar_id":"","url":"https://api.github.com/users/rozmarbeka","html_url":"https://github.com/rozmarbeka","followers_url":"https://api.github.com/users/rozmarbeka/followers","following_url":"https://api.github.com/users/rozmarbeka/following{/other_user}","gists_url":"https://api.github.com/users/rozmarbeka/gists{/gist_id}","starred_url":"https://api.github.com/users/rozmarbeka/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rozmarbeka/subscriptions","organizations_url":"https://api.github.com/users/rozmarbeka/orgs","repos_url":"https://api.github.com/users/rozmarbeka/repos","events_url":"https://api.github.com/users/rozmarbeka/events{/privacy}","received_events_url":"https://api.github.com/users/rozmarbeka/received_events","type":"User","site_admin":false},"created_at":"2016-10-28T16:06:57Z","updated_at":"2016-10-28T16:06:57Z","body":"I configured the logout urls but if I click on logout link an AuthnRequest sent to SSO.\r\n\r\n```\r\n<samlp:AuthnRequest \r\n    AssertionConsumerServiceURL='http://issues.bud01.atlassoft.lan' \r\n    Destination='http://auth.bud01.atlassoft.lan/simplesaml/saml2/idp/SSOService.php' \r\n    ID='_11fac030-7f56-0134-5ce0-126d35dbd279' \r\n    IssueInstant='2016-10-28T16:04:03Z' \r\n    Version='2.0' \r\n    xmlns:saml='urn:oasis:names:tc:SAML:2.0:assertion' \r\n    xmlns:samlp='urn:oasis:names:tc:SAML:2.0:protocol'>\r\n    <saml:Issuer>http://issues.bud01.atlassoft.lan</saml:Issuer>\r\n    <samlp:NameIDPolicy \r\n        AllowCreate='true' \r\n        Format='urn:oasis:names:tc:SAML:2.0:nameid-format:email'/>\r\n</samlp:AuthnRequest>\r\n```\r\n\r\nDid you have similar issue?"}}
{"actor":{"display_login":"rozmarbeka"}}