When I sign out, I should be redirected to the new sign up/sign in page

[tprudentova]

1. You’re inside of twake drive
2. Click Sign out
3. You’re redirected to the lemon ldap page
   Expectation: you're redirected to the new sign-up page

Screen.Recording.2024-04-26.at.10.37.20.mov

[guimard]

Hi @rezk2ll, which way do you use to signup ?

[guimard]

@tprudentova : before fixing this we have to fix sub-issues : Tdrive isn't compatible with OIDC logout, then even if you're disconnected from SSO, you might be considered as still connected by Tdrive

[rezk2ll]

Hi @rezk2ll, which way do you use to signup ?

Hi, we use /?login to display the login form directly and / for normal signup

[guimard]

Hi @rezk2ll, which way do you use to signup ?

Hi, we use /?login to display the login form directly and / for normal signup

Sorry, my question was about signout. Probably /?logout=1

[rezk2ll]

Hi @rezk2ll, which way do you use to signup ?

Hi, we use /?login to display the login form directly and / for normal signup

Sorry, my question was about signout. Probably /?logout=1

for registration it's /logout

[guimard]

OK, then let's wait for Tdrive logout

[shepilov]

@guimard How the redirect url after logout is connected to the backlog out channel for oidc?
Right now you have that same behavior for Twake Mail as well, after logout you are redirected to the LemonLDAP page https://auth.stg.lin-saas.com/ and not to the https://sign-up.stg.lin-saas.com/

[guimard]

@guimard How the redirect url after logout is connected to the backlog out channel for oidc? Right now you have that same behavior for Twake Mail as well, after logout you are redirected to the LemonLDAP page https://auth.stg.lin-saas.com/ and not to the https://sign-up.stg.lin-saas.com/

Not directly connected, however :

• logout should not redirect to the caller app, prefer the login/registration page
• logout should be hidden until we're sure that all applications really support logout. In my previous job, I preferred to totally hide logout feature instead of lying. User were prompted "Close you browser" .

[guimard]

SO let's define the global logout behavior we want, then I'll configure LLNG

[guimard]

Fixed in yadd/lemonldap-ng-* v2.18.2-11, pushed (Commit 6179515 inside TWP staging)

It requires also a new env variables (FIXED_LOGOUT_REDIRECTION) but I don't know where push it since lemonldap/values.yaml has no more environment paragraph, @ducnm0711 could you help here ?

[ducnm0711]

@guimard Hi Xavier what should be the default value for FIXED_LOGOUT_REDIRECTION? Boolean true/false or ?

[guimard]

@guimard Hi Xavier what should be the default value for FIXED_LOGOUT_REDIRECTION? Boolean true/false or ?

The URL to redirect after successful logout (https://sign-up...)

[ducnm0711]

implemented in lemonldap

https://ci.linagora.com/linagora/lrs/saas/deployments/twake/twake-workplace-preprod-apps/-/blob/main/configs/auth/twake-workplace-sso/default/values.yaml#L51

  FIXED_LOGOUT_REDIRECTION: {{ .Values.config.logoutRedirection | quote }}
  ------
  config:
    logoutRedirection: https://sign-up.stg.lin-saas.com

[shepilov]

Still not working and should be fixed with #141