From e40fa5fcb439497ef33e88b8077c19d0bcb4371e Mon Sep 17 00:00:00 2001
From: Laurent <40686856+lagess@users.noreply.github.com>
Date: Tue, 28 Mar 2023 14:42:48 +0200
Subject: [PATCH] SOAP backchannel logout for SAML protocol (#17722)

---
 .../public/resources/en/clients-help.json        |  1 +
 .../admin-ui/public/resources/en/clients.json    |  1 +
 .../advanced/FineGrainSamlEndpointConfig.tsx     | 16 ++++++++++++++++
 3 files changed, 18 insertions(+)

diff --git a/js/apps/admin-ui/public/resources/en/clients-help.json b/js/apps/admin-ui/public/resources/en/clients-help.json
index e482a5bf63..edb6214d2d 100644
--- a/js/apps/admin-ui/public/resources/en/clients-help.json
+++ b/js/apps/admin-ui/public/resources/en/clients-help.json
@@ -115,6 +115,7 @@
   "assertionConsumerServiceRedirectBindingURL": "SAML Redirect Binding URL for the client's assertion consumer service (login responses). You can leave this blank if you do not have a URL for this binding.",
   "logoutServicePostBindingURL": "SAML POST Binding URL for the client's single logout service. You can leave this blank if you are using a different binding",
   "logoutServiceRedirectBindingURL": "SAML Redirect Binding URL for the client's single logout service. You can leave this blank if you are using a different binding.",
+  "logoutServiceSoapBindingUrl": "SAML SOAP Binding URL for the client's single logout service. You can leave this blank if you are using a different binding.",
   "logoutServiceArtifactBindingUrl": "SAML ARTIFACT Binding URL for the client's single logout service. You can leave this blank if you are using a different binding.",
   "artifactBindingUrl": "URL to send the HTTP ARTIFACT messages to. You can leave this blank if you are using a different binding. This value should be set when forcing ARTIFACT binding together with IdP initiated login.",
   "frontchannelLogout": "When true, logout requires a browser redirect to client. When false, server performs a background invocation for logout.",
diff --git a/js/apps/admin-ui/public/resources/en/clients.json b/js/apps/admin-ui/public/resources/en/clients.json
index 31fc5f47f8..bbda32054f 100644
--- a/js/apps/admin-ui/public/resources/en/clients.json
+++ b/js/apps/admin-ui/public/resources/en/clients.json
@@ -495,6 +495,7 @@
   "assertionConsumerServiceRedirectBindingURL": "Assertion Consumer Service Redirect Binding URL",
   "logoutServicePostBindingURL": "Logout Service POST Binding URL",
   "logoutServiceRedirectBindingURL": "Logout Service Redirect Binding URL",
+  "logoutServiceSoapBindingUrl": "Logout Service SOAP Binding URL",
   "logoutServiceArtifactBindingUrl": "Logout Service ARTIFACT Binding URL",
   "artifactBindingUrl": "Artifact Binding URL",
   "artifactResolutionService": "Artifact Resolution Service",
diff --git a/js/apps/admin-ui/src/clients/advanced/FineGrainSamlEndpointConfig.tsx b/js/apps/admin-ui/src/clients/advanced/FineGrainSamlEndpointConfig.tsx
index 17d9fd60ea..f13a5c5a87 100644
--- a/js/apps/admin-ui/src/clients/advanced/FineGrainSamlEndpointConfig.tsx
+++ b/js/apps/admin-ui/src/clients/advanced/FineGrainSamlEndpointConfig.tsx
@@ -87,6 +87,22 @@ export const FineGrainSamlEndpointConfig = ({
           {...register("attributes.saml_single_logout_service_url_redirect")}
         />
       </FormGroup>
+      <FormGroup
+        label={t("logoutServiceSoapBindingUrl")}
+        fieldId="logoutServiceSoapBindingUrl"
+        labelIcon={
+          <HelpItem
+            helpText="clients-help:logoutServiceSoapBindingUrl"
+            fieldLabelId="clients:logoutServiceSoapBindingUrl"
+          />
+        }
+      >
+        <KeycloakTextInput
+          id="logoutServiceSoapBindingUrl"
+          type="url"
+          {...register("attributes.saml_single_logout_service_url_soap")}
+        />
+      </FormGroup>
       <FormGroup
         label={t("logoutServiceArtifactBindingUrl")}
         fieldId="logoutServiceArtifactBindingUrl"