Issues with SSPR login after logging out.

  • 7016341
  • 23-Mar-2015
  • 24-Mar-2015

Environment

NetIQ Identity Manager Roles Based Provisioning Module 4.5
NetIQ Identity Manager 4.5

Situation

Currently, the OSP-SSPR installer sets the logout URL for SSPR to:

%protocol%://%server%:%port%/osp/a/idm/auth/app/logout

This does work.  

The issue is after you logout of sspr  the URL will be: %protocol%://%server%:%port%/osp/a/idm/auth/app/

If you then try to login again (either as the same user or a different)

You will either see the screen flash and you are back on the OSP login 
or
You will be on on a page that states:

"One SSO Platform"

with a NetIQ logo and a logout link

Resolution

The fix is to change the logout url to:


%protocol%://%server%:%port%/osp/a/idm/auth/app/logout?target=%protocol%://%server%:%port%/sspr


for example:

https://apps.novell.com:8180/osp/a/idm/auth/app/logout?target=https://apps.novell.com:8180/sspr

Steps to resolve:
1) Access SSPR
2) Login as the Admin user
3) Press on button "Configuration Editor"
4) Provide the configuration password
5) Select Settings -> Application
6) Go to the Logout URL field
- change the logout to:
%protocol%://%server%:%port%/osp/a/idm/auth/app/logout?target=%protocol%://%server%:%port%/sspr

https://apps.novell.com:8180/osp/a/idm/auth/app/logout?target=https://apps.novell.com:8180/sspr

7) Press save
8) You should not have to restart Tomcat, but it would not do any harm
9) Test

Additional Information

This is currently slated to be fixed in IDM 4.6