CdC and SAPUI5 app integration

[mxiccato]

Hi community,

in our scenario we have SAML SSO configured like this: BTP sub-account > IAS as "in the middle" IdP > CdC (Corporate IdP enabled via Conditional Authentication in IAS)

Log-in part of the flow is working well. If I access my standalone fiori app (no launchpad) deployed in BTP, CdC login page come out. My question is: which is the right way to manage log-off? Should I add a custom log-off html page in my app that call CdC API and log-off? It seem strange to me that I could not find any blog / SCN post / documentation speaking about this scenario (Fiori and CdC)... I was expecting this to be the most used one 🙂

There is something wrong in what I say?

Thank you so much,

Manuel

[romaingorrias · Accepted solution]

Hi Manuel,

Since your integration is SAML based, you can simply leverage the SAML SLO (single log out) flow which is supported by CDC (and IAS). As long as your SLO urls are configured in both SP and IDP, then the easiest way to set it up would probably be, in this case, an IDP-initiated SLO; simply adding a logout button / link on your site that calls accounts.logout, the SAML IDP (CDC) will then call the SLO endpoint of all connected SPs. This should work, even with IAS proxying your SAML requests.

Hope this helps,

Romain.