SAML addon logout callback not working

Hello,

we have a setup where we’re using Auth0 as an Identity Provider and Learnworlds as a Service Provider connected via SAML2 Web App, and having issues with Single Logout functionality. We have two apps, one is nextjs based where we implemented Auth0 Provider and the other one is standard Learnworlds with SAML enabled.

What works:

  • Login both ways (when we login in IdP app, SP is logged in as well, and vice versa)
  • Logout from SP also logs user out in IdP app

What doesn’t work:

  • Logout from IdP doesn’t log user out from SP (in this case Learnworlds app)

We got the Single Logout URL from Learnworlds app and set it to SAML addon logout callback (also allowed in application settings)

I installed SAML-tracer browser extension it picks up every SAML request (login both ways, logout from SP) except that one, seems it just doesn’t trigger. Any ideas what could be wrong?

Thanks in advance

Hi @helloHealth

Welcome to the Auth0 Community!

While searching for a potential solution, I found that the learnworld guide to setup SLO can have an error.

To logout users from Auth0 IDP you need to follow this URL https://YOUR_DOMAIN/samlp/CLIENT_ID/logout

not the regular one as mentioned in the guide

In the URL it will be https://YOUR_AUTH0_DOMAIN/v2/logout? client_id=YOUR_CLIENT_ID& returnTo=LOGOUT_URL where Client_id is the Client ID of your Auth0 application.

If you want to read more about SLO Auth0, you can find an excellent guide here.

If you found this post helpful or interesting, please give it a like :+1: . Your interaction makes a difference. Have a wonderful day! :sun_with_face:

Dawid


:video_camera: Prefer how-to videos instead of written docs? We’ve got you covered! Check out our OktaDev YouTube channel for those helpful resources!

1 Like

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.