sso-saml logout issue

[Former Member]

Hi Experts,

We have configured SSO-Saml between Oracle web center portal and SAP-Abap. OWC portal(Idp) will initiate the saml request to SAP(sp) and we used  Email-id as a identity federation.

Previously when owc portal initiated the saml request, we have faced relay state error while log into sap. So in Service provider ACS, we have mentioned the webgui services as a default application path and its started working and we are able to access SAP system through Sap gui for html(webgui) from OWC.

But when we are logging off from SAP,only SAP is logged off but SAML session is not logged off. I mean OWC portal in not logged off.

please guide me what we need to do in SLO for log off of the entire SAML session and is there any option to provide our own URL to redirect to logout page or what else we need to do.

Thanks in Advance,

Regards,

Lakshmanan V

,

[WolfgangJanzen]

What you do mean exactly by "when we are logging off from SAP" - are you referring to the "Log off" button provided by "webgui"?

In that case, it is required to change the ICF service configuration for the ICF service "webgui" (using SICF):

Instead of modifying the ICF service itself, it might be smarter to create a so-called "external alias" with the identical name (/sap/bc/gui/sap/its/webgui) as the ICF service. This will overlay the settings, and it not considered a "modification".