Keycloak 18 legacy backward logout compatibility option

Configuring the server
1

Hi,

I use keycloak 18 with the version with wildfly. What is the option to set to have the compatibility corresponding to the directive spi-login-protocol-openid-connect-legacy-logout-redirect-uri which is available for keycloak quarkus distribution?

Thanks

2

I didn’t test it, but from the naming convention I deviate something like this as JBOSS-CLI command:

/subsystem=keycloak-server/spi=login-protocol:add
/subsystem=keycloak-server/spi=login-protocol/provider=openid-connect:add(enabled=true)
/subsystem=keycloak-server/spi=login-protocol/provider=openid-connect:write-attribute(name=properties.legacy-logout-redirect-uri,value=true)

which should result in an entry in standalone(-ha).xml in the keycloak-server subsystem like this:

<spi name="login-protocol">
  <provider name="openid-connect" enabled="true">
    <properties>
      <property name="legacy-logout-redirect-uri" value="true"/>
    </properties>
  </provider>
</spi>
4 Likes
3

Hello,
It works.
Thanks !

1 Like
4

Does the backwards compat setting also work with the new params? Meaning it would be compatable so we can use it to send just the rediret or post_log_outredirect with the id_hint