Cannot sign_out of Forwadh auth (Single application) about authentik HOT 5 OPEN

Hi guys,

Also as @info-path, i AM trying to invalidate de session.

At the moment i AM just trying to invalidate de session from authentik so, if i logout from authentik or the session expires, all the forwarded applications, independent of the authentication method, should require a login on authentik.
Right now it kinda does it but on some situations it bypasses the verification for some reason and redirects it to the forwarded application even though i have logged out of the authentik.

Can anyone explain me how can i properly setup this to work properly as i AM unable to understand how to do it with the official documentation.

Than you all,
Best Regards

from authentik.

Right now it kinda does it but on some situations it bypasses the verification for some reason and redirects it to the forwarded application even though i have logged out of the authentik.

I also encountered a situation where I logged out of Authentic, but the app remained accessible. I discovered that there was an issue with auth.domain.com because Firefox repeatedly indicated that the site was not secure, even though other browsers confirmed its security. I had registered this domain through Zero Trust Cloudflare.

I resolved this by registering the domain outside the Cloudflare tunnel. Once the security issue was fixed, the logout issue was also resolved. Now, the app logs out correctly with every authentication logout.

from authentik.

Hello,

Thank you for your Reply.
I do indeed use Cloudflare. Are you suggesting to use another DNS provider instead cloudflare? I currently have everything setup with cloudflare.

Best Regards

from authentik.

I stayed with Cloudflare, only for auth.domain.com, which I use for Authentik I don't use a tunnel, but a standard reverse proxy of Traefik.

There might not even be a problem with the tunnel itself, because I tried another subdomain that didn't do these problems.

from authentik.

After a quick search regarding what you spoke about i was able to find a user that Gave some guidance on this thread.

https://github.com/sebw/blog.wains.be/blob/master/content/posts/2023/2023-01-07-cloudflare-zero-trust-authentik.md?plain=1

I Will try it to adapt this to my setup and update this thread with my finds.

But i Will try to avoud using the zero trust due to the fact that they haver more Control of the information that passes

Thanks you

from authentik.