Details
-
Bug
-
Status: Closed (View Workflow)
-
P2
-
Resolution: Done
-
None
-
Prokopovych - Sprint 114
-
1
-
Prokopovych
-
R2 2021
Description
Overview:
The "Log out" menu option should warn that the SSO SAML login is kept.
Steps to Reproduce:
- Log into some FOLIO environment where SSO is configured, for example https://folio-demo.gbv.de/ using login rick and password psych and all default options (remember login, ask me again if information to be provided to this service changes)
- In FOLIO go to the top right user menu and click "Log out"
- After logout the login page of the FOLIO instance opens.
- Click "Login via SSO"
- The SSO login is successful because the identity provider (IdP) knows that the SSO login hasn't expired.
Expected Results:
The log out menu entry warns that the SSO login is kept if the tenant has SSO enabled, for example:
Actual Results:
The log out menu entry wording is "Log out", the warning is missing.
Use case:
I want to switch the user account in FOLIO. For the first account I use SSO, for the secound account I use the traditional non-SSO username+password login. And I still want to keep my SSO session at the SSO IdP so that I don't need to enter my credentials again when I want to switch back to the first account in FOLIO or if I want to use some other campus app with SSO and the first account.
Additional Information:
This issue is about renaming the existing logout option from "Log out" to "Log out from FOLIO, keep SSO login" (feel free to suggest an even better wording) when the tenant has SSO enabled.
props.okapi.ssoEnabled reports whether SSO is enabled. If false "Log out" is used, if true "Log out from FOLIO, keep SSO login" is used.
Related: MODLOGSAML-92 is the issue for adding a logout menu entry that logs out from both FOLIO and SSO ("Log out from FOLIO and SSO".
Interested parties:
Universidad de Zaragoza
TestRail: Results
Attachments
Issue Links
- clones
-
MODLOGSAML-92 SSO Logout does not destroy SAML session
-
- Closed
-
- relates to
-
FOLIO-1233 Implement refresh tokens
-
- Closed
-
-
MODAT-56 validate user deactivation when checking access token
-
- Closed
-
-
STCOR-580 Link to IdP's simple logout page
-
- Blocked
-
-
MODLOGSAML-94 Provide SLO (Single Log Out) endpoint to be called by SSO IdP
-
- Closed
-