Logout from Keycloak session when logging out from Semaphore

[spomata]

Hi all,

I am running a docker-based Semaphore setup successfully integrated with Keycloak.

I noticed that there's no option to logout from Keycloak when logging out from Semaphore which means that basically you can't simply switch users unless you manually logout from the SSO provider.

I guess for OIDC it boils down to visit a particular URL after closing the session

https://KEYCLOAK-HOST/auth/realms/YOUR-REALM/protocol/openid-connect/logout

Is my assumption correct?

I might even be able to contribute a patch if head developers feel it could be useful. Thanks

[fiftin]

Hi @spomata

could you test latest version of Semaphore with Keycloak?

[spomata]

Hi @fiftin

Just tried with the latest version. Clicking on logout brings me back to the login page of Semaphore, however the SSO button will grant immediately another session with the same user, i.e. behaviour has not changed.

I think that Semaphore is not visiting the OIDC logout endpoint as far as I could see from the API calls, but only: $URL/api/auth/logout

[ashokmnr]

Any update on this topic?

[Romloader]

Hi @spomata @ashokmnr I don't know exactly if it's applicable but Grafana does it this way https://grafana.com/docs/grafana/latest/setup-grafana/configure-access/configure-authentication/keycloak/#enable-single-logout

Just wrote here to leave the docs link in case it's useful, I sstill have to try it in semaphore (if it's even possible)