"not in whitelisted redirect uris" message in Citrix Netscaler

I was recently working on authentication and had a small issue.

In the log, there was a message like as below.

<local0.info> xxx.xx.xx.xxx  05/23/2023:06:48:21 GMT VPX02 0-PPE-0 : default AAATM Message 136 0 :  "OAUTH IDP LOGOUT: incoming post logout redirect uri [https://-----.xxxx.com/] not in whitelisted logout redirect uris for user []"

I have confirmed that this issue is caused by the pattern sets.

For pattern sets part, this is a new security enhancement to prevent XSS attack from the untrusted attackers since 13.1 45.x.

So to solve this issue, you can add a URI in the pattern set.

In my case, it was the "OAUTH IDP LOGOUT" message, so I added it to the next entry.

 

This below articles were written by Citrix.

User may be redirected to On-premises AAA Logout Page after Logging off Citrix Cloud