I am working on a demo which uses ADFS 2.0 as identity provider. All is working fine except for log out functionality.
The following is the code I am using to log out the user:
Dim url As String = WSFederationAuthenticationModule.GetFederationPassiveSignOutUrl("https://winstd.development.com/adfs/ls/", "https://coldfusioniis.winstd.development.com/WebAppsUserManagement/default.aspx", Nothing)
WSFederationAuthenticationModule.FederatedSignOut(New Uri(url), New Uri("https://coldfusioniis.winstd.development.com/WebAppsUserManagement/default.aspx"))My expectations are that the user after being signed out at ADFS 2.0 would return to the home page at which point the WIF would return to login page: https://winstd.development.com/adfs/ls/. And as a matter of fact the uses is being returned to the home page after sign out and then redirected to ADFS login page. But the ADFS is not displaying the log in page at all. Instead, it log the user in automatically and redirects to the home page.
What am I missing here?
For your convenience I compiled a list of of the request and corresponding results once the sign out process is initiated by navigating to https://coldfusioniis.winstd.development.com/WebAppsUserManagement/logoff.ashx:
Request: GET https://coldfusioniis.winstd.development.com/WebAppsUserManagement/logoff.ashx <<<< this where the log out process process starts
Result: 302 Redirect to: https://winstd.development.com/adfs/ls/?wa=wsignout1.0&wreply=https%3a%2f%2fcoldfusioniis.winstd.development.com%2fWebAppsUserManagement%2fdefault.aspx
Request: GET https://winstd.development.com/adfs/ls/?wa=wsignout1.0&wreply=https%3a%2f%2fcoldfusioniis.winstd.development.com%2fWebAppsUserManagement%2fdefault.aspx
Result: 200 text/html
Request: GET https://coldfusioniis.winstd.development.com/WebAppsUserManagement/default.aspx
Result: 302 Redirect to: https://winstd.development.com/adfs/ls/?wa=wsignin1.0&wtrealm=https%3a%2f%2fcoldfusioniis.winstd.development.com%2fWebAppsUserManagement%2f&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fWebAppsUserManagement%252fdefault.aspx&wct=2010-06-25T19%3a44%3a32Z
Request: GET https://winstd.development.com/adfs/ls/?wa=wsignin1.0&wtrealm=https%3a%2f%2fcoldfusioniis.winstd.development.com%2fWebAppsUserManagement%2f&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fWebAppsUserManagement%252fdefault.aspx&wct=2010-06-25T19%3a44%3a32Z
Result: 302 Redirect to: /adfs/ls/auth/integrated/?wa=wsignin1.0&wtrealm=https%3a%2f%2fcoldfusioniis.winstd.development.com%2fWebAppsUserManagement%2f&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fWebAppsUserManagement%252fdefault.aspx&wct=2010-06-25T19%3a44%3a32Z <<<<<<<< This
is where the user is being signed in automatically instead of being prompted to enter the user name and password.
Request: GET https://winstd.development.com/adfs/ls/auth/integrated/?wa=wsignin1.0&wtrealm=https%3a%2f%2fcoldfusioniis.winstd.development.com%2fWebAppsUserManagement%2f&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fWebAppsUserManagement%252fdefault.aspx&wct=2010-06-25T19%3a44%3a32Z
Result: 200 text/html
Request: POST https://coldfusioniis.winstd.development.com/WebAppsUserManagement/
Result: 302 Redirect to: /WebAppsUserManagement/default.aspx
Request: GET https://coldfusioniis.winstd.development.com/WebAppsUserManagement/default.aspx
Result: 200 text/html
Any help would be greatly appreciated.
Thanks!
Zen