COmanage Users List

[Scott Koranda <>]

Hi Harshad,

> How to redirect public page after logout on comanage registry.?
> Use-case is after logout, redirect to page in public page directory.
> 
> Thanks,
> Harshad Sawant, IUCAA.

COmanage Registry itself is agnostic about both login and logout, and it
delegates those responsibilities to the web server, usually Apache HTTP
Server (Apache).

You are using the COmanage Registry container with Shibboleth SP
authentication, so configuring both login and logout means configuring
the Shibboleth SP Apache module.

Since you are running the container it includes an Apache configuration
file in /etc/apache2/sites-available/000-comanage.conf

The file contains this Apache configuration stanza:

RewriteEngine On
RewriteCond %{QUERY_STRING} !after_redirect
RewriteRule ^/registry/auth/logout.* 
https://%{HTTP_HOST}/Shibboleth.sso/Logout?return=https://%{HTTP_HOST}/registry/auth/logout/?after_redirect
 [L,R]

That stanza tells Apache then when the browser visits 

/registry/auth/logout.*

which is what happens when the user selects LOGOUT from the menu, it
should first direct to

/Shibboleth.sso/Logout

to end the Shibboleth SP session, and then after that go back to

/registry/auth/logout

to end the COmanage Registry session.

If you use SAML Tracer and logout you will see that the paths visited
are

/registry/auth/logout
/Shibboleth.sso/Logout?return=https://%{HTTP_HOST}/registry/auth/logout/?after_redirect
/registry/auth/logout/?after_redirect
/registry/users/logout/?after_redirect

If you want to then have the web browser redirected somewhere, you can
edit that file (perhaps mount in a new version) that includes more
RewriteCond and RewriteRule lines to redirect the browser after the
Shibboleth SP and COmanage Registry sessions have been ended.

Please consult the documentation on the mod_rewrite Apache module for
details.

Thanks,

Scott