SSO - Cannot Log Out

(Tim Jensen) #1

I have set up SSO, using WordPress as the provider. The log in process works as expected; however, the log out process does not work. When I click “Log Out” from the Discourse menu I do see a modal confirming logout, but then I am automatically logged back in when the page refreshes. Is there a way to fix this so that clicking “Log Out” actually logs the user out of Discourse?

Related: The authentication request that Discourse makes to WordPress only has sso and sig args, so there’s no way for me to check on the provider side if the request is a logout request since the signature looks identical to a login request.

(Simon Cossar) #2

This will happen if the login required setting is enabled on your Discourse site. To get users logged out of Discourse, they also need to be logged out of the WordPress site. To log users out of WordPress, set the Discourse logout redirect site setting to https://example.com/?request=logout, with your domain name substituted for example.com.

4 Likes
(Tim Jensen) #3

Perfect! Adding the logout redirect was exactly what I was looking for. Thanks!

2 Likes