Front Channel Logout URI (for SLO)

By: Stephen LAI user 24 May 2017 at 2:45 a.m. CDT

4 Responses
Stephen LAI gravatar
I am having dynamic registration of OpenID Connect clients on a Gluu server. Now, clients can be registered properly. However, according to "OpenID Connect Dynamic Client Registration 1.0" (https://openid.net/specs/openid-connect-registration-1_0.html), I cannot find the metadata for setting the Front Channel Logout URI during the dynamic client registration operation. (Single Logout is needed. Therefore, the Front Channel Logout URI needs to be set.) Till now, from "OpenID Connect Session Management 1.0" (http://openid.net/specs/openid-connect-session-1_0.html), I have found also the metadata for setting Redirect Logout URIs.
U1404
closed

Answers

By Stephen LAI user 24 May 2017 at 4:26 a.m. CDT

Copy
Stephen LAI gravatar
By trial and error, I find that the metadata for setting the Front Channel Logout URI is frontchannel_logout_uri.

By Michael Schwartz Account Admin 24 May 2017 at 8:23 a.m. CDT

Copy
Michael Schwartz gravatar
It's defined in the [OpenID Front Channel Logout Spec](http://openid.net/specs/openid-connect-frontchannel-1_0.html#RPLogout)

By Aliaksandr Samuseu staff 24 May 2017 at 9:25 a.m. CDT

Copy
Aliaksandr Samuseu gravatar
Hi, Stephen. It's as Michaels says. `frontchannel_logout_uri` is specified as metadata parameter which can be used in dynamic registrations there. Do you think there still may be some issue with docs or Gluu itself?

By Stephen LAI user 24 May 2017 at 10:14 a.m. CDT

Copy
Stephen LAI gravatar
Thanks for replies from Michael and Aliaksandr. At the moment, my only advice is having Dynamic Deletion / Unregistration of OpenID Connect Clients. (Currently, OIDC Clients can only be deleted / unregistered using oxTrust.)

Post an answer