This message was deleted.
# citrix-netscalers
Slackbot
02/09/2023, 10:35 PMThis message was deleted.
d
Daniel Marsh
02/10/2023, 3:18 AMWhat's your logout URL configured to in the AAD app?
d
Daniel Swafford
02/12/2023, 7:16 PMthanks for the reply @Daniel Marsh. It's https://login.microsoftonline.com/GUID/saml2 which I dont think is correct 🤔
d
Daniel Marsh
02/12/2023, 8:36 PMNo - it should be https://<gatewayfqdn>/cgi/logout
d
Daniel Swafford
02/12/2023, 8:44 PMthanks will give that a go
Daniel Swafford
02/13/2023, 12:29 AMhmm damn, still getting it
Daniel Swafford
02/13/2023, 12:30 AMthat look correct? 🤔
Daniel Swafford
02/13/2023, 2:29 AMfixed it, was a config issue on netscaler side. Didn't have the right signing cert and issuer name set in the saml policy
👍 1
m
Mike Streetz (O_P)
02/14/2023, 5:54 PMCitrix says it should be https://<gatewayfqdn>/cgi/logout but Microsoft say it should be https://login.microsoftonline.com/GUID/saml2, so which is it? I’ve only managed to get it working with the MS url
Mike Streetz (O_P)
02/14/2023, 5:55 PMand there’s other citrix docs that say it should be https://saml.cloud.com/saml/logout/callback
Mike Streetz (O_P)
02/14/2023, 5:55 PMif using citrix cloud
d
Daniel Swafford
02/14/2023, 7:37 PMhttps://<gatewayfqdn>/cgi/logout seemed to work for us, not using citrix cloud
d
Daniel Marsh
02/15/2023, 1:26 AMMike when you hit /cgi/logout it kills your logged in session on the NetScaler (NSC_AAAC cookie), then redirects to the logout URL specified in your SAML profile to kill the SAML session as well.
🙌 1
m
Mike Streetz (O_P)
02/15/2023, 4:44 PMdoes cgi/logout work for gateway service too?
d
Daniel Marsh
02/16/2023, 3:52 AMWhen you configure Cloud for Azure AD it automatically sets up the apps in AAD with OID & OAuth and there's no SAML settings to define - so I'm not sure how it works behind the scenes. The Citrix docs don't go into any detail about how it's configured unfortunately.
m
Mike Streetz (O_P)
02/16/2023, 4:09 PMThat's what I've found too, I'm also asking the product team
👍 1
d
Daniel Marsh
02/17/2023, 2:09 AMLet me know what you find out!