altinn-studio icon indicating copy to clipboard operation
altinn-studio copied to clipboard

Published 20 hours ago • verified publisher icon Altinn

Altinn should support OIDC post_logout_redirect_uri parameter

Open etsikt opened this issue 2 years ago • 2 comments

What needs to be solved?

  1. The user has logged in with custom OIDC, f.ex. Feide and this app: https://udir.apps.altinn.no/udir/invitasjon-vfkl
  2. The user closes the app and is taken to the Altinn inbox.
  3. The user decides to logout.
  4. The user is taken to https://altinn.no/
  5. On that page, the user cannot select to login with OIDC (Feide).

How do you want it solved?

Altinn studio should support the post_logout_redirect_uri as described by Feide:

https://docs.feide.no/service_providers/manage/openid_connect/redir_etter_logout.html

and specified in the OpenID Connect RP-Initiated Logout 1.0 - draft 02 specification reference by the Feide documentation:

https://openid.net/specs/openid-connect-rpinitiated-1_0.html#RPLogout

When logging out, Altinn should check if the OIDC service has specified the post_logout_redirect_uri parameter and forward the user there, such that we can give the user the possibility of logging in with OIDC (Feide) again.

etsikt avatar May 19 '22 07:05 etsikt