laptop and a wrench

Bug

When specifying a logout endpoint URL (SAML or OIDC) containing URL parameters, an invalid request to the logout endpoint URL is constructed.

Portal for ArcGIS
Bug ID Number BUG-000160730
SubmittedAugust 16, 2023
Last ModifiedJune 10, 2025
Applies toPortal for ArcGIS
Version found10.9.1
Operating SystemWindows Server
Operating System Version2019 64 Bit
StatusNon-Reproducible

Additional Information

Query parameters should not be set by the user but defined by the relying party, which in this case is ArcGIS, so when configuring the ArcGIS openID configuration, query parameters should not be used when setting the logout URL. Query parameters for OpenID Connect logouts are limited to the predefined set documented in the OpenID Connect specification: https://openid.net/specs/openid-connect-rpinitiated-1_0.html#RPLogout The guide for configuring AWS Cognito on Github has been replaced since the previous one, published four years ago, was obsolete and contained an incorrect logout URL. https://github.com/Esri/idp/blob/main/Documentation/OpenID/AWS%20Cognito.md

Steps to Reproduce

Bug ID: BUG-000160730

Software:

  • Portal for ArcGIS

Get notified when the status of a bug changes

Download the Esri Support App

Discover more on this topic

Esri Community

Search for related information

Training

Find training related to this topic

ArcGIS Ideas

Explore ideas and give feedback

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options