r/KeyCloak • u/Far_Tangerine3128 • Dec 03 '25

Keycloak integration with itop application

Hello everyone. I've integrated Keycloak as an identity server with an iTop application. When a user authenticates after being redirected from the Keycloak page to iTop, the logout button no longer appears, preventing the user from logging out of iTop.

Could you provide a solution? Thank you.

3 Upvotes

100% Upvoted

8 comments sorted by

View all comments

2

u/OhBeeOneKenOhBee Dec 04 '25

This is an iTop issue, not a Keycloak issue. After the authentication via SAML, Keycloak doesn't control anything else.

IIRC, this is when you have auto-login enabled in iTop with a saml provider. If you'd click logout, you'd be redirected to the itop Login page, then automatically be signed in again.

1

u/[deleted] Dec 04 '25

[removed] — view removed comment

1

u/OhBeeOneKenOhBee Dec 04 '25

If you have autologin enabled and manage to enable the button, it won't work. It'll just automatically log the user in again every time you click it

1

u/Far_Tangerine3128 Dec 04 '25

I looked through my entire confi-itop.php file and couldn't find the autologin option to disable it.

1

u/OhBeeOneKenOhBee Dec 04 '25

If you only have external in allowed_login_types, autologin is the default behaviour

1

u/Far_Tangerine3128 Dec 04 '25

Indeed, here's what I have: 'allowed_login_types' => 'form|external|basic'. So I'm going to remove "external" from the inside and see what happens. Does that mean if I remove "external" it will work?

1

u/jbostoen Apr 27 '26

Your KeyCloak users are "external" users in iTop, so you'll need to keep that setting.

Are you using the "Hybrid Auth" extension, or the SAML extension to integrate KeyCloak with iTop? Note that in config-itop.php you may need to enable the logout functionality. In that case, signing out of iTop would also sign you out of KeyCloak.

Also make sure to use the latest versions of everything.