Skip to content

v1.17.0

Choose a tag to compare

View all tags
@tdrabikdev tdrabikdev released this 12 Jul 10:58
v1.17.0
6e1a6e2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

SSO single-logout — OIDC and SAML.

  • OIDC RP-initiated logout (#592) — logout redirects to the IdP end_session_endpoint (id_token_hint + post_logout_redirect_uri) so the IdP session ends too; captured at login, applied via a Logout-event listener before session invalidation. IdPs without an end-session endpoint fall back to local logout.
  • SAML SP-initiated single-logout (#594) — a OneLogin LogoutRequest (NameID + SessionIndex from login) targets the new idp_slo_url; a /saml/{team}/sls endpoint handles the IdP LogoutResponse; SP metadata advertises the SingleLogoutService.

G2 SSO is now complete end-to-end for OIDC and SAML — login and logout.

Operational: run migrations (saml_connections gains idp_slo_url); set the IdP Single Logout URL to enable SAML SLO.

Full suite 1133 passed / 1 skipped. PHPStan 0-new. Pint clean. MySQL-verified.

Assets 2
Loading