http://jira.mobinets.com/jira This file is an XML representation of an issue en-us 6.1.4 6159 19-11-2013 http://jira.mobinets.com/jira/browse/LS-1027 L3 Support <p>Users are facing errors while logging out of NEP through ADFS. The logout process does not terminate the session properly, leading to session persistence issues.</p> <p>This may also be contributing to the “User already authenticated” issue.</p> <p>Steps to Reproduce:</p> <p>Login to NEP via ADFS<br/> Click on Logout<br/> Observe behavior</p> <p>Actual Result:</p> <p>Error during logout (ADFS URL issue)<br/> Session not terminated</p> <p>Expected Result:</p> <p>Successful logout without errors<br/> Complete session termination (both NEP + ADFS)</p> <p>Impact:</p> <p>Sessions remain active<br/> Users face login issues later<br/> Security concern (session persistence)</p> LS-1027

NEP Logout via ADFS – Session Not Terminating Properly (ADFS URL Error)

Bug Normal Ready for QA Unresolved Sanju Yadav Sanju Yadav Wed, 25 Mar 2026 09:59:06 +0200 Fri, 3 Apr 2026 13:40:47 +0300 NEP Wed, 25 Mar 2026 00:00:00 +0200 0 2 <p>Fix: AppUserChecker.check() now evicts the stale cache entry instead of throwing on re-login. Also hardened adfsLogin() to swallow logout errors before calling validateToken.</p> <p>Root cause: Spring Security user cache was not evicted on SSO logout when the authentication field was null/stale after Vaadin session reset, causing AppUserChecker to block re-login with MultipleAuthenticationException.<br/> Fix: AppUserChecker.check() now evicts the stale cache entry instead of throwing on re-login. Also hardened adfsLogin() to swallow logout errors before calling validateToken.</p> Complexity Customer Dev. Actual Duration Gantt Options Last Comment <p style="display:inline"><b>Evaluation License Error:</b> EXPIRED</p> Original Estimate PDM Actual Duration Planned End Wed, 25 Mar 2026 00:00:00 +0200 Planned Start Wed, 25 Mar 2026 00:00:00 +0200 Product Rank 0|xtizgx: Rank (Obsolete) 9223372036854775807 VTDirections