Configuring What Happens on Openspace Logout

When a user logs out of TIBCO Openspace, usually the current Openspace session is cleared and the current URL is reloaded. However, you can specify a different URL to load, using the Openspace property logout.path. If you are using CA SiteMinder, for example, you can specify the URL of a custom logout page that clears the SiteMinder session.

The property logout.path is in the Openspace config.properties file, in the TIBCO ActiveMatrix BPM configuration directory. For example:

  • Openspace:

    C:\ProgramData\amx-bpm\tibco\data\tibcohost\Admin-AMX BPM-AMX BPM Server\data_3.2.x\host\plugins\com.tibco.openspace.login_1.7.1.00n\resources\config.properties

  • Accessible Openspace:

    C:\ProgramData\amx-bpm\tibco\data\tibcohost\Admin-AMX BPM-AMX BPM Server\data_3.2.x\host\plugins\com.tibco.os.a11y.app_1.1.1.005\accessibility\config.properties

Prerequisites

TIBCO recommends you back up the config.properties file before amending it.

Procedure

  1. Open the config.properties file in a text editor.
  2. Configure the property logout.path as follows:
    Value Description
    logout The default value causes the ActiveMatrix BPM server to clear the current Openspace session and then the current URL is reloaded, which results in the Openspace login page being displayed.
    Empty string (or property is commented out or missing) This causes the Openspace client browser to clear the current Openspace session and then the current URL is reloaded, which results in the Openspace login page being displayed.
    A URL starting http This value causes the ActiveMatrix BPM server to clear the current Openspace session and then this URL is loaded.

    For security reasons, the domain of this URL must match the domain of the ActiveMatrix BPM runtime server, otherwise the domain must be whitelisted using the whiteListAddresses property in the OSProperties.properties file.

    /bpm/logout The logout.path property must be set to this value if you are using OpenID Connect for single sign-on authentication. When using OpenID, the value of this property must match the value of the OpenID configuration property, Logout Path, which is "/bpm/logout".

    For more information, see the Logout Path property in Using ActiveMatrix Administrator to create an OpenID Connect Shared Resource.

    https://host:port/bpm/logout The logout.path property must be set to this value if you are using SAML Web Profile for single sign-on authentication.

    host is the DNS name or IP address of the server that hosts the ActiveMatrix BPM runtime and port is the port used by the application.

    For more information about using SAML Web Profile for SSO authentication, see Using SAML Web Profile with ActiveMatrix BPM.

  3. Save and close the config.properties file.
  4. Log out and log back into Openspace for the changes to take effect.