Forum Discussion

CoyH_249729's avatar
CoyH_249729
Icon for Nimbostratus rankNimbostratus
Feb 28, 2017

iRule help for APM logout with ReturnURL redirect

We are in need of assistance on an iRule for our APM logout function. Today we have a SAML iDP configuration with various applications using the F5 as the iDP. We want to logout of the iDP and then follow the ReturnURL provided by the SP.

Today we have two scenarios:
  • When you log out it takes you back to the login screen of APM (default behavior)
  • We send a hardcoded redirect to a single page.

Desired result:

Current iRule to at least send the client to a page showing they have logged out.

    when ACCESS_ACL_ALLOWED {
      if { [HTTP::path] starts_with "/logout" } {
        ACCESS::session remove
        ACCESS::respond 302 Location "http://www.domain.com/pages/logout" "Set-Cookie" "MRHSession=0; expires=Tuesday, 29-Mar-1970 00:15:00 GMT" "Connection" "Close"
      }
    }
APM
application delivery
iRules

1 Reply

Sort By
  • Niels_van_Sluis's avatar
    Niels_van_Sluis
    Icon for MVP rankMVP
    Feb 28, 2017

    Something like this?

    when ACCESS_ACL_ALLOWED {
    if { [HTTP::path] starts_with "/logout" } {
        set return_url [URI::query [HTTP::uri] ReturnURL] 
        ACCESS::session remove
        ACCESS::respond 302 Location $return_url "Set-Cookie" "MRHSession=0; expires=Tuesday, 29-Mar-1970 00:15:00 GMT" "Connection" "Close"
    }
}