Use Front-Channel Logout from SSO

Author: alexandrerw

front/logout.php

@@ -44,9 +44,14 @@
 if (
     $CFG_GLPI["ssovariables_id"] > 0
     && ((string) $CFG_GLPI['ssologout_url']) !== ''
+    && Session::isAuthenticated()
 ) {
-    Session::cleanOnLogout();
-    Html::redirect($CFG_GLPI["ssologout_url"]);
+    if (!$CFG_GLPI["useFrontChannelLogout"]) {
+        Session::cleanOnLogout();
+    }
+    if (!$CFG_GLPI["useFrontChannelLogout"] || !isset($_GET['frontChannelLogout'])) {
+        Html::redirect($CFG_GLPI["ssologout_url"]);
+    }
 }
 
 if (

templates/pages/setup/authentication/other_ext_setup.html.twig

@@ -88,6 +88,11 @@
                         config['existing_auth_server_field_clean_domain'],
                         __('Remove the domain of logins like login@domain')
                      ) }}
+                     {{ fields.dropdownYesNo(
+                        'useFrontChannelLogout',
+                        config['useFrontChannelLogout'],
+                        __('Use Front-Channel Logout from SSO')
+                     ) }}
                      {{ fields.textField('realname_ssofield', config['realname_ssofield'], __('Surname')) }}
                      {{ fields.textField('firstname_ssofield', config['firstname_ssofield'], __('First name')) }}
                      {{ fields.textField('comment_ssofield', config['comment_ssofield'], __('Comments')) }}