SAML logout is stuck in redirect loops

Issue: Logged in gitlab using SAML. Click sign-out button, Logout request and Logout response both are coming in SAML tracer. But after that Gitlab again sends multiple Logout requests to idP.

I think the issue is with idp_slo_session_destroy: 'proc { |env, _session| env[:clearance].sign_out } in gitlab.rb file. How should we destroy the session ? Both SP- initiated logout and idp- initiated logout are not working.

Please revert asap.

Edited Jul 07, 2025 by 🤖 GitLab Bot 🤖
Assignee Loading
Time tracking Loading