Unable To Log Out Of Unity Connection Administration

[Grizz]

Recently upgraded to Unity Connection v14SU4 (Cisco Unity Connection version: 14.0.1.14900-36). After correcting a replication issue and renewing tomcat/ipsec certs, I am unable to sign out of the admin interface.  When attempting to sign out, it attempts to reach a long URL beginning with https://adfs-geo.(our  domain), which fails, and it never actually signs out. I can't find a single thing around this anywhere. Anyone have an idea?

Screenshot attached.

[Brad Magnani]

Looks like you have SSO enabled, ADFS is your IDP.  I'm assuming since you're enabled for SSO on CUC, then CUCM is also SSO enabled.   Is the behavior seen on CUCM after logging out?  Do you also get redirected to your IDP?

[Grizz]

I didn't think SSO was enabled, but I'll double-check. No, the behavior is not seen on CUCM. 

[Grizz]

SSO was disabled on CUCM, but it was enabled on CUC. I ran the disable process; it shows disabled but the disable button is still present (suggesting something is still enabled that can be disabled). In CUCM, that button says enable, suggesting everything is disabled. So, is it disabled? The behavior hasn't cleared.

[Brad Magnani]

When you enable/disable SSO, it says it'll restart Cisco Tomcat automatically.  Did that happen?  Depending on what state it's in, you may need to reboot if manually restarting Tomcat yourself also doesn't clear it.  Something sounds "stuck".  

[Grizz]

That happened, then I restarted Cisco Tomcat via the CLI on both nodes, but that did not clear the issue. I'll reboot during a maintenance window tonight and see what happens.