How to logout for OKTA OIDC application hosted behind AWS ALB

[MattKucia]

I have the same issue but I still don’t understand if there is a solution or not. The workaround is a rather poor one.

Basically, the AWS Application Load Balancer handles OIDC. The application receives x-amzn-oidc headers.

Can I extract id_token_hint =<id token> from those headers? What is the field id token in those?

Or is it something that AWS needs to implement in the AWS?

• openid connect - Implementing logout with Okta when app is hosted behind an AWS Alb - Stack Overflow
• OIDC / Logout with AWS ALB
• [OIDC] Logout without having the original Id Token?
• Authenticate users using an Application Load Balancer - Elastic Load Balancing