OIDC Logout in CA Access Gateway (SPS)

Products

• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• SITEMINDER

Issue/Introduction

 

When running CA Access Gateway (SPS) as an OIDC provider.

How to implement the logout functionality?

What endpoint would the client call?

 

Resolution

 

SLO is not available for Siteminder OIDC Clients or Authorization Providers, unfortunately.

To achieve this functionality, implement a custom solution.

Leverage Siteminder's LogOffURI functionality to achieve this on the CA Access Gateway (SPS) side.

Integrating this with a third party would depend on the third party software and whether it supports any logout functionality.