Bug 37894 - Staff logout SSO issue
Summary: Staff logout SSO issue
Status: RESOLVED INVALID
Alias: None
Product: Koha
Classification: Unclassified
Component: Authentication (show other bugs)
Version: 22.11
Hardware: All All
: P5 - low normal
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-09-11 14:31 UTC by Daphne Hoolahan
Modified: 2025-09-26 03:01 UTC (History)
2 users (show)

See Also:
GIT URL:
Initiative type: ---
Sponsorship status: ---
Comma delimited list of Sponsors:
Crowdfunding goal: 0
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Daphne Hoolahan 2024-09-11 14:31:02 UTC
KOHA logout not working (just refreshes page) when SSO Azure session has expired.
To reproduce this:
1. Login to Koha staff side SSO (if you logout now it functions)
2. If I leave the session for an extended period of time (1+ hour) I can see the SSO session with azure has expired using KohaSite/Shibboleth.sso/Session
3. If i now try to logout of Koha, the Logout button just refreshes the staff interface and stays logged in. Log  out is now only possible by closing the browser.
Comment 1 David Cook 2025-09-26 03:01:10 UTC
It's not clear which SSO feature was used here - whether it was one of the old OIDC ones or if it is using the new Identity Providers feature
Comment 2 David Cook 2025-09-26 03:01:25 UTC
Please re-open if you can supply more information