A Good Morning for Single Logout Between Identity Manager and OpenSSO
By docteger on Sep 22, 2009
This entry describe how to configure single logout between Identity Manager 220.127.116.11 (to be released sometime in October) and OpenSSO Enterprise 8.0. In the Identity Manager WAR,
/idmis the base context of the deployment and thus the admnistrator area;
/idm/useris the user area. You should be able to do the following:
- If logged out of the administration area, the person should be redirected to the same upon re-login.
- If logged out of the user area, the person should be redirected to the same upon re-login.
- Log in to the OpenSSO administration console as the administrator.
- Click the Access Control tab.
- Click the appropriate realm name and navigate to the agent profile for the policy agent that protects Identity Manager.
- Under the agent profile, click the Application tab.
- Click Logout Processing.
- Add the following map keys and values to the Application Logout URI property:
- Add the following map and key values to the Logout Entry URI property:
- Click Save.
- Log out of OpenSSO.
- Log into Identity Manager.
- In the Identity Manager application window, click Logout IDM.
This should log you out of both Identity Manager and OpenSSO and then redirect you back to the OpenSSO login page.
- Log in to OpenSSO.
You should be redirected to the specific Identity Manager administrator or user profile.