Qliksense Single Logout Configuration Requirements for SAML (Keycloak)

giusepperr — Wed, 29 Jan 2025 16:38:32 GMT

I am looking for someone that can tell me what is the correct configuration in keycloak to work properly with Qliksense.

I have read on the internet Qliksense single log out needs the saml to be signed but it sound really weird to me as also the login should fail.

Could anyone shed some light on either the keycloak configuration or the Qliksense requirements for Single Log Out?

I cannot really understand the issue from the SAML tracer logs but I could post those here if it is helpful

Re: Qliksense Single Logout Configuration Requirements for SAML (Keycloak)

SteveAO — Thu, 08 Dec 2022 07:43:30 GMT

Yes. Hello. Your SLO URL should look like this (under the 'Fine Grain SAML Endpoint Configuration' for your realm's client):

'Logout Service POST Binding URL' => 'https://your.qlikVip.tld/<virtualProxy>/samlauthn/slo/'

and

'Logout Service Redirect Binding URL' => 'https://your.qlikVip.tld/<virtualProxy>/samlauthn/slo/'