Logout entry missing in menu, no way to logout after impersonation

The Basics

  • Nextcloud Server version (e.g., 29.x.x):
    • 33.0.6
  • Operating system and version (e.g., Ubuntu 24.04):
    • Debian 13
  • Web server and version (e.g, Apache 2.4.25):
    • nginx 1.22.1
  • PHP version (e.g, 8.3):
    • 8.4.22
  • Is this the first time you’ve seen this error? (Yes / No):
    • No
  • When did this problem seem to first start?
    • previous version ? one month ago ?
  • Installation method (e.g. AlO, NCP, Bare Metal/Archive, etc.)
    • Manual installation
  • Are you using CloudfIare, mod_security, or similar? (Yes / No)
    • No

Summary of the issue you are facing:

Logout entry missing in menu, no way to logout.
This does not happens always but when it happens even removing cookies and local store does not fix it while reloging using a private session on the very same browser does work.

Note, i am using SAML SSO version 8.1.3.

There is no menu entry to logout.

trying url /logout fails with CSRF check

deleting cookies using debug (F12) allows to reconnect but still no logout menu.

Using private browsing with a brand new login works,

deleting cookies for whole domain within firefox parameters privacy configuration fixes it.

Steps to replicate it (hint: details matter!):

  1. Log with SSO portal as main user with admin rights
  2. Impersonate as another user ( Account / select accoun, impersonate )
  3. There is no way to exit from this new user connexion.

Then any new login won’t have logout, even after discarding cookies or relogin in portal.

Log entries

Nextcloud

Please provide the log entries from your Nextcloud log that are generated during the time of problem (via the Copy raw option from Administration settings->Logging screen or from your nextcloud.log located in your data directory). Feel free to use a pastebin/gist service if necessary.

PASTE HERE

Web Browser

Firefox 140.13.0esr (64 bits)

Configuration

Nextcloud

The output of occ config:list system or similar is best, but, if not possible, the contents of your config.php file from /path/to/nextcloud is fine (make sure to remove any identifiable information!):

PASTE HERE

Apps

The output of occ app:list

Enabled:
  - activity: 6.0.0
  - app_api: 33.0.0
  - bruteforcesettings: 6.0.0
  - calendar: 6.5.1
  - calendar_resource_management: 0.12.1
  - circles: 33.0.0
  - cloud_federation_api: 1.17.0
  - comments: 1.23.0
  - contacts: 8.7.4
  - contactsinteraction: 1.14.1
  - dashboard: 7.13.0
  - dav: 1.36.0
  - deck: 1.17.4
  - federatedfilesharing: 1.23.0
  - federation: 1.23.0
  - files: 2.5.0
  - files_downloadlimit: 5.1.0
  - files_external: 1.25.1
  - files_pdfviewer: 6.0.0
  - files_reminders: 1.6.0
  - files_sharing: 1.25.2
  - files_trashbin: 1.23.0
  - files_versions: 1.26.0
  - firstrunwizard: 6.0.0
  - forms: 5.3.4
  - impersonate: 4.0.0
  - logreader: 6.0.0
  - lookup_server_connector: 1.21.0
  - nextcloud_announcements: 5.0.0
  - notifications: 6.0.0
  - notify_push: 1.3.3
  - oauth2: 1.21.0
  - password_policy: 5.0.0
  - photos: 6.0.0
  - polls: 9.1.4
  - privacy: 5.0.0
  - profile: 1.2.0
  - provisioning_api: 1.23.0
  - recommendations: 6.0.0
  - related_resources: 4.0.0
  - richdocuments: 10.2.0
  - richdocumentscode_arm64: 26.4.104
  - serverinfo: 5.0.0
  - settings: 1.16.0
  - sharebymail: 1.23.0
  - spreed: 23.0.7
  - support: 5.0.0
  - survey_client: 5.0.0
  - systemtags: 1.23.0
  - text: 7.0.1
  - theming: 2.8.0
  - twofactor_backupcodes: 1.22.0
  - twofactor_totp: 15.0.0
  - updatenotification: 1.23.0
  - uppush: 2.5.0
  - user_saml: 8.1.3
  - user_status: 1.13.0
  - viewer: 6.0.0
  - weather_status: 1.13.0
  - webhook_listeners: 1.5.0
  - workflow_script: 4.0.1
  - workflowengine: 2.15.0
Disabled:
  - admin_audit: 1.23.0
  - encryption: 2.21.0
  - suspicious_login: 11.0.0
  - twofactor_nextcloud_notification: 7.0.0
  - user_ldap: 1.24.0 (installed 1.21.0)

Tips for increasing the likelihood of a response

  • Use the preformatted text formatting option in the editor for all log entries and configuration output.
  • If screenshots are useful, feel free to include them.
    • If possible, also include key error output in text form so it can be searched for.
  • Try to edit log output only minimally (if at all) so that it can be ran through analyzers / formatters by those trying to help you.

This is certainly a browser issue.

Deleting cookies using F12 developer mode does not fix it, but deleting cookies using firefox privacy configuration parameters management does actualy fix it.

A github issue in SAML app Logout link not being shown sometimes · Issue #951 · nextcloud/user_saml · GitHub seems to show same behavior.