Getting NullPointerException on SAML Logout using RH-SSO 7.2.0 GA ?

Solution Verified - Updated -

Issue

  • The SAML Logout response (<samlp:LogoutResponse ...>) cannot be handled - the following NPE is thrown:

    ERROR [org.keycloak.services.error.KeycloakErrorHandler] (default task-12) Uncaught server error: java.lang.NullPointerException
    at org.keycloak.events.EventBuilder.client(EventBuilder.java:93)
    at org.keycloak.protocol.saml.SamlProtocol.finishLogout(SamlProtocol.java:612)
    at org.keycloak.services.managers.AuthenticationManager.finishBrowserLogout(AuthenticationManager.java:523)
    at org.keycloak.broker.saml.SAMLEndpoint$Binding.handleLogoutResponse(SAMLEndpoint.java:509)
    at org.keycloak.broker.saml.SAMLEndpoint$Binding.handleSamlResponse(SAMLEndpoint.java:483)
    at org.keycloak.broker.saml.SAMLEndpoint$Binding.execute(SAMLEndpoint.java:237)
    at org.keycloak.broker.saml.SAMLEndpoint.postBinding(SAMLEndpoint.java:157)
    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.lang.reflect.Method.invoke(Method.java:498)
    at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:140)
    ...
    

Environment

  • Red Hat Single Sign-On (RH-SSO)
    • 7.2.0.GA
  • Setup a SAML IdP and a SAML client in a realm
  • Login to the client via IdP
  • SAML logout

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In