Before reporting an issue

• I have read and understood the above terms for submitting issues, and I understand that my issue may be closed without action if I do not follow them.

Area

saml

Describe the bug

The Single Logout Service is an optional field of SAML2. Versions of Keycloak <25.0.0 did not require this value to configure an IdP

KC versions >=25.0.0 have this marked as required.

In the past the field was not require (from 24.0.5):

Version

25.0.2

Regression

• The issue is a regression

Expected behavior

a Single Logout URL should not be required.

Actual behavior

Without providing a value the looks like URL (https://something), the IdP cannot be created. While this works, it will create issues down the line.

How to Reproduce?

1. Create a new SAML2 idP
2. Slide Use entity descriptor to off
3. Fill out required fields, leaving Single logout service URL empty
4. Observe you cannot create the IdP

Anything else?

I noticed in conjunction with #31780

If this is by design, my apologies.