SAML logout is stuck in redirect loops
Issue: Logged in gitlab using SAML. Click sign-out button, Logout request and Logout response both are coming in SAML tracer. But after that Gitlab again sends multiple Logout requests to idP.
I think the issue is with idp_slo_session_destroy: 'proc { |env, _session| env[:clearance].sign_out } in gitlab.rb file. How should we destroy the session ? Both SP- initiated logout and idp- initiated logout are not working.
Please revert asap.
Edited by 🤖 GitLab Bot 🤖