Oracle Access Manager(OAM) OpenID Connect Logout Does Not Forward State Parameter To Post_logout_redirect_uri (Doc ID 2790163.1)

Last updated on NOVEMBER 17, 2023

Applies to:

Oracle Access Manager - Version 12.2.1.4.201201 and later
Information in this document applies to any platform.

Using OpenID for authentication and OAuth for authorization using OAM (OpenID Provider (OP)) for your Application (Relaying Party (RP) ).

Login and other use cases except logout works as expected
The application (Relaying Party) triggers Logout to OAM REST end point to end_session_endpoint/oauth2/rest/userlogout with opaque state value
Logout works on OAM (OP) and it (OAM/OP) redirects to post_logout_redirect_uri but without state value included by Application (RP)
Header trace ...

	To view full details, sign in with your My Oracle Support account.
	Don't have a My Oracle Support account? Click to get started!

In this Document

Symptoms

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.