Alternate URL for logout requests about phpcas HOT 4 CLOSED

The phpCAS library intercepts logout calls on any URL if it's embedded. At least in a simple setup phpCAS just works out of the box no matter which URL is used. We check every for any logout data.
See our example: https://github.com/apereo/phpCAS/blob/master/docs/examples/example_logout.php

The default for the CAS server is to use the original service URL used during login or you can now manually "override" this on the server side for non-standard CAS client implementations: https://apereo.github.io/cas/6.6.x/installation/Logout-Single-Signout.html#service-endpoint-for-logout-requests

There is another ticket that explains a bit how single logout works and how to debug this: #373

from phpcas.

Thanks for the insight!

According to the guys running our CAS server, the custom logout URL is specified by the requesting client, not the server. However, that contradicts what you say and also what the documentation says.

The default for the CAS server is to use the original service URL used during login

I see. In our case we're now quite confident that this will be at most two different URLs, depending on whether the user was already logged into the SSO, or requested it while not being logged in. So we'll just call phpCAS::handleLogoutRequests() in both locations and that should do it. Unfortunately we cannot call this for every request, as this integrates poorly into our framework.

Thanks for the help, I will close this for now.

from phpcas.

Are you looking at the CAS server, or the CAS client/protocol doc?

from phpcas.

I'm a bit confused about what that documentation is really for. Are you suggesting that this is something that needs to be configured on the CAS server and cannot be specified by the application at login time? That would actually make sense. I'll ask the people running the CAS server to see if they can configure it.

from phpcas.