SAML Redirect URL

[JohnBuckingham1]

Hi all,

We've been testing the use of SAML authentication in Canvas given that the SAML option allows us to set-up a Logout URL redirect.

We've noticed that when a user does sign out, the logout url does work as expected. However, the logout URL is very long string. That is to say, it redirects to our webpage, but at the very end of the url it adds:"?SAMLRequest=" followed by a very long string of characters.

Does anyone know why and how to stop this?

[chriscas]

Hi @JohnBuckingham1,

The SAML Logout URL is supposed to be a URL to your SAML server which would process a user logout.  It sounds like you may have just put a regular website URL in that box, am I correct?  If so, you'll definitely want to switch your configuration up.  Our SAML/Shibboleth logout lets us redirect users to a website after the URL (done by a querystring parameter), but I'm not on our authentication team, so I don't know exactly how they did that on the authentication side.  Maybe someone else will know more about this, even though it's not really a Canvas/Instructure question.

-Chris