nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

As we transition to the new Hyland Community, some post links may be temporarily disrupted as we finalize redirects. We apologize for the inconvenience and are working to resolve this as quickly as possible. Details.

alfresco share logout with external SSO

bharathmallela

HI ,

I have include the alfresco in .Net Application has Tab, configured Alfresco with external SSO .

we have common log out button for entire application ,i need to invalidate the alfresco session when we click common logout.

Any suggestions how to invalidate the alfresco user session.

Thanks

Bharath

Find more posts tagged with

Comments

idwright

This depends on which version you're using.

In recent versions you need to do a POST to /page/dologout - you can use redirectURL and redirectURLQueryKey/redirectQueryKeyValue to determine where the request ends up.

In earlier versions this was a GET

Normally I would expect the redirectURL to take you to the SSO logout - you've got to logout of both Alfresco and SSO for it to be effective

You can end up with a 401 response even if it's worked

bharathmallela

Hi Ian,

Thanks for suggestion.

I am using alfresco 5.0.1 .

yes it helps, if I implement logout mechanism from alfresco ,It was working from alfresco logout.

referred from your blog Alfresco CAS Integration

but the logout button was enabled in .Net application.

when user clicks on logout button from .Net application, i need clear the alfresco user session ??

hope you understand my problem

Thanks

Bharath

idwright

Providing that the CSRF config doesn't get in the way, it should be possible to post to that link from your .Net application - posting to that link will clear the Alfresco user session.

One thing to be aware of it that if the user is still signed in to SSO then you have to be careful that they don't get automatically logged back in - I think that's where the redirectURL parameter is important for your use case.

bharathmallela

Thanks for your response

we tried to post the URL share/page/dologout from .Net application.

user session got invalidate, but it was not redirecting to URL mentioned in redirectURL

Thanks

Bharath