Hi Everyone, Quick Question - We have configured O...
# all-things-deployment
h
Hi Everyone, Quick Question - We have configured OIDC for logging in. We notice that when we click on logout, it again redirects to the authentication , rather than logout screen. Anything that we need to configure for logout ?
e
Hi @handsome-football-66174 so just to confirm, you’re being asked to sign in again when you log out? But you are indeed logged out?
h
@echoing-airport-49548 Yes that's correct
b
this is the expected behavior
h
@big-carpet-38439 - instead of showing the login screen, it redirects to authentication for the user which is logging out. So essentially unable to log back in using a different user.
b
i think if you have SSO enabled (which is not a setting in datahub), then the logout button will lead you back to the oidc login page (which automatically logs you back into datahub).
h
@better-orange-49102 @big-carpet-38439 - We tried configuring a logout URI, it is directly redirecting to authentication for the previously logged in user.
@incalculable-ocean-74010 - Thank you for the details ! Looks like this is expected OIDC behaviour.
👍 1
b
it is directly redirecting to authentication for previously logged in user? Yes it will do that, but the Identity Provider should show their login screen!
If you have configure that login redirect URI
h
@big-carpet-38439 - Yes it is redirecting for authentication for the previously logged in user, even though we have configured the login redirect URI
b
When DataHub makes a request to logout we automatically hit the end_session_endpoint which appears in the well-known discovery URI -> If this is not inside of there then we may not be able to log the user out, and thus the issue we are seeing
The fix may be that we need to take a logout endpoint as part of configuration and attempt to use that
f
Same problem happened with me, the workaround proposed in this comment fixed the problem: https://github.com/datahub-project/datahub/issues/4854#issuecomment-1193616763