Can't logout as SP, sloResult returns null

SAML for ASP.NET Core
1

Hi team,

I received a sloResult is null when trying to logout as SP, here is what I did:
1. visit SP, login in via SAML, works fine
2. logout from SP via SAML, works fine, browser redirects to SP’s entry page, this page then redirects to IdP’s login page
3. login in at Idp, browser then redirects back to SP’s main page, sso works fine
4. logout SP via SAML, throws an exception because sloResult is null. sloResult = await samlServiceProvider.ReceiveSloAsync();

When debugging, I can see that these two logins holds the same value for saml-session cookie. And for the second logout, I can see when calling SP’s logout api, the request header do not contain a saml-session cookie. I don’t know what’s the issue since the second login works fine via SAML.

Is there any ways that you would suggest to troubleshot this problem?
Thank you so much!


2

I’m not sure why the SAML logout works the first time but not the second.

If the saml-session cookie is missing, it’s possible this is the result of the recent SameSite=None changes to Chrome.

https://www.componentspace.com/Forums/10491/SAML-Cookie-SameSite-Mode-None

If there’s still an issue, please enable SAML trace and send the generated log file as an email attachment to support@componentspace.com mentioning your forum post.

https://www.componentspace.com/Forums/7936/Enabling-SAML-Trace

3
[quote]
ComponentSpace - 3/22/2020
I'm not sure why the SAML logout works the first time but not the second.

If the saml-session cookie is missing, it's possible this is the result of the recent SameSite=None changes to Chrome.

https://www.componentspace.com/Forums/10491/SAML-Cookie-SameSite-Mode-None

If there's still an issue, please enable SAML trace and send the generated log file as an email attachment to support@componentspace.com mentioning your forum post.

https://www.componentspace.com/Forums/7936/Enabling-SAML-Trace

[/quote]

Hi team,

I have explicitly set the SameSite to None in the code.
Is there any particular reason that will make sloResult to null?


4

I’m not sure how it’s possible to receive a null sloResult. Either a non-null sloResult is returned or an exception is thrown.

5
[quote]
ComponentSpace - 3/22/2020

I'm not sure how it's possible to receive a null sloResult. Either a non-null sloResult is returned or an exception is thrown.

[/quote]

Hi team

I throw a self-defined exception.

ISloResult sloResult = null;
sloResult = await samlServiceProvider.ReceiveSloAsync();
if (sloResult == null)
{
throw new Exception("slo is null");
}
6

We need the log to investigate further. Please include the complete sequence (steps 1 - 4).