Hi Team,
I am trying to implement SSO and SLO for Google using ComponentSpace.Saml2. SSO works fine as expected. When is try log-out from Google then below error has occurred in var sloResult = await _samlIdentityProvider.ReceiveSloAsync(); Please let me know the cause for this issue.
----------------------------- Error ------------------------------------
2018-10-17T17:25:04.7790127-07:00 0HLHKHRUS2527:00000001 [INF] Executing action method “SAML2.Controllers.Saml2IDPController.SingleLogoutService (SAML2)” with arguments (null) - ModelState is Valid (ba7f4ac2)
2018-10-17T17:25:08.5943119-07:00 0HLHKHRUS2527:00000001 [ERR] Receiving an SLO message from a partner service provider has failed. (9ba98326)
ComponentSpace.Saml2.Exceptions.SamlBindingException: A SAML message cannot be received as the HTTP request is unrecognized.
at ComponentSpace.Saml2.SamlProvider.d__84.MoveNext()
— End of stack trace from previous location where exception was thrown —
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at ComponentSpace.Saml2.SamlIdentityProvider.d__21.MoveNext()
2018-10-17T17:25:08.6997315-07:00 0HLHKHRUS2527:00000001 [INF] Executed action “SAML2.Controllers.Saml2IDPController.SingleLogoutService (SAML2)” in 3923.8807ms (afa2e885)
2018-10-17T17:25:14.3041003-07:00 0HLHKHRUS2527:00000001 [ERR] An unhandled exception has occurred: A SAML message cannot be received as the HTTP request is unrecognized. (37c2def3)
ComponentSpace.Saml2.Exceptions.SamlBindingException: A SAML message cannot be received as the HTTP request is unrecognized.
at ComponentSpace.Saml2.SamlProvider.d__84.MoveNext()
I’m afraid Google doesn’t support SAML logout.
When you logout from Google it simply redirects to your IdP. It doesn’t send a SAML logout request.
I suggest configuring a different URL in Google rather than your Saml2IDPController.SingleLogoutService.
This alternative URL is for non-SAML logouts.
You should simply logout the user locally and redirect to the appropriate page.