Drupal

Follow the steps below to configure Single Logout (SLO) between your Drupal site and Keycloak:

1. Update the Logout URL in the Drupal miniOrange OAuth Client module Configuration

1. Navigate to the Sign-In Settings tab in the module.
2. Scroll down to the Provider Specific Settings section.
3. Edit the configuration for your Identity Provider (Keycloak).
4. Locate the Redirect URL after logout field and add given URL. (http://{keycloak-server}/realms/{realm-name}/protocol/openid-connect/logout)
5. Check the box “Include ID Token in End Session Endpoint”.
6. Click Save Configuration.

2. Update Logout Settings in Keycloak

1. Log in to your Keycloak Admin Console.
2. Navigate to your client configuration (the client representing your Drupal site).
3. Scroll down to the field Valid Post Logout Redirect URIs.
4. Add your Drupal site Base URL 
5. Save the configuration.

3. Test the SLO Flow

• Log in via Keycloak SSO.
• Log out from Drupal and confirm that the session is terminated both in Drupal and Keycloak.
• Verify that you are redirected correctly after logout.
  
  You have now successfully set up Single Logout (SLO) between Drupal and Keycloak.
  
  If you encounter any issues, please feel free to reach out to us at drupalsupport@xecurify.com.