Saml Single logout for Smartedit, HAC and Backoffice

[former_member721691]

We have implemented Saml single sign on with Okta for Backoffice, Smartedit and HAC using the OOB implementation in CCV2 2105. We have configured single logout also for Backoffice by configuring "backoffice.success.logout.url=/../samlsinglesignon/saml/logout" but not able to find any documentation for implementing the same for HAC and Smartedit.

Is there any OOB configuration available to apply Single Logout for HAC and Smartedit? or we need to do some customization?

[mansurarisoy]

It looks like the backoffice-spring-security.xml file has the following Spring security configuration where logout url can be specified with the property you are mentioning.

<logout logout-url="/j_spring_security_logout" logout-success-url="#{cockpitProperties.getProperty('success.logout.url')}"/>

Unfortunately, spring-security-config.xml file for hac following configuration for logout

<logout logout-url="/j_spring_security_logout" logout-success-url="/login"/>

Thus, the short answer for your question is no, there is no such property for hac.

To achieve similar behavior to the Backoffice, you may override with this file with a customization via buildcallbacks.xml (See Replacing OOTB Files from https://help.sap.com/viewer/1be46286b36a4aa48205be5a96240672/latest/en-US/b35bc14a62aa4950bdba451a5f....

Another option may be to try to intervene the logout process of Spring, but it may be very hard (even not possible) to achieve considering the definitions are in web folder of the hac.

For smartedit, there seems to be a implementation for what you need. Look for the constants defined in smarteditconstants.ts

export const DEFAULT_AUTHENTICATION_CLIENT_ID = 'smartedit';
export const SSO_AUTHENTICATION_ENTRY_POINT = '/samlsinglesignon/saml';
export const SSO_OAUTH2_AUTHENTICATION_ENTRY_POINT = '/smartedit/authenticate';
export const SSO_LOGOUT_ENTRY_POINT = '/samlsinglesignon/saml/logout';

It seems there are references for SSO_LOGOUT_ENTRY_POINT in the code as well, but I am no expert on Angular and Frontend, so I could not comment on this.

Hope this helps,