Qliksense Single Logout Configuration Requirements for SAML (Keycloak)

[giusepperr]

I am looking for someone that can tell me what is the correct configuration in keycloak to work properly with Qliksense.

I have followed the online guide and the Login flow works but the Logout flow fails. https://community.qlik.com/t5/Knowledge/Qlik-Sense-for-Windows-How-to-set-up-Keycloak-as-SAML-Identi...

I have read on the internet Qliksense single log out needs the saml to be signed but it sound really weird to me as also the login should fail.

Could anyone shed some light on either the keycloak configuration or the Qliksense requirements for Single Log Out? 

I cannot really understand the issue from the SAML tracer logs but I could post those here if it is helpful

[SteveAO · Accepted solution]

Yes. Hello. Your SLO URL should look like this (under the 'Fine Grain SAML Endpoint Configuration' for your realm's client): 

'Logout Service POST Binding URL' => 'https://your.qlikVip.tld/<virtualProxy>/samlauthn/slo/'

and 

'Logout Service Redirect Binding URL' => 'https://your.qlikVip.tld/<virtualProxy>/samlauthn/slo/'