# Logout.. case sensitive!

**URL:** <https://devforum.okta.com/t/logout-case-sensitive/10690>\
**Category:** OAuth/OIDC\
**Tags:** api\
**Created:** [August 26, 2020, 6:34pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690 "2020-08-26T18:34:23Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![kevintparker](https://avatars.discourse-cdn.com/v4/letter/k/3da27b/32.png) [@kevintparker](https://devforum.okta.com/u/kevintparker)\
**Post date:** [August 26, 2020, 6:34pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/1 "2020-08-26T18:34:23Z")

</div>

This was driving me crazy.

We are using Okta for our customer facing applications and not employees (yet). Customer login to each app on their own and do not have a ‘tiles’ landing page. Single-Sign-On kicks in as they go from application to application.

In case you want to logout of Okta (all of Okta, not necessarily each app), and send the user back to the original application where they clicked logout, I suggest this pattern:  
https://{oktaOrgUrl}/login/signout?fromURI={redirected logout url}

A couple of notes here.

1. fromURI IS CASE SENSITIVE. I tried several combinations and they would all send the user back to the configured default app for sign-in widget and not the {redirected logout url}.  
 ![image](https://global.discourse-cdn.com/oktadev/original/2X/f/f1495ded73b4079ce7c0df6853886c4c50ba7737.png)

2.If using OpenId, I believe you need to ensure the {redirected logout url} in configured for Logout redirect URIs

 ![image](https://global.discourse-cdn.com/oktadev/original/2X/0/002c3cdde0be43dcdebdf109629b78b83c24fa21.png)

1. Lastly, make sure the domain of that redirect url in configured as a trusted origin (under Security \> API link)  

2. fromURI IS CASE SENSITIVE!

---

<div class="post-metadata">

**Author:** ![oscarm](https://avatars.discourse-cdn.com/v4/letter/o/34f0e0/32.png) [@oscarm](https://devforum.okta.com/u/oscarm)\
**Post date:** [March 23, 2021, 3:51pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/2 "2021-03-23T15:51:37Z")

</div>

Hi @kevintparker,

I was testing your suggestion and confirmed that redirecting to the URL and not the ‘tiles’ landing page was working as of a week ago.  
It is now currently redirecting to ‘tiles’ once a user logs out of the application.  
Is this pattern still working properly on your application?

Thank you!

---

<div class="post-metadata">

**Author:** ![kevintparker](https://avatars.discourse-cdn.com/v4/letter/k/3da27b/32.png) [@kevintparker](https://devforum.okta.com/u/kevintparker)\
**Post date:** [March 23, 2021, 7:04pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/3 "2021-03-23T19:04:38Z")

</div>

It is still working on ours. Did anything change in terms of the configuration of the application?

---

<div class="post-metadata">

**Author:** ![oscarm](https://avatars.discourse-cdn.com/v4/letter/o/34f0e0/32.png) [@oscarm](https://devforum.okta.com/u/oscarm)\
**Post date:** [March 23, 2021, 7:36pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/4 "2021-03-23T19:36:44Z")

</div>

Thanks @kevintparker.  
We will verify if any changes were made to the suggestions you pointed out in your post.

---

<div class="post-metadata">

**Author:** ![kare](https://avatars.discourse-cdn.com/v4/letter/k/4af34b/32.png) [@kare](https://devforum.okta.com/u/kare)\
**Post date:** [June 17, 2021, 6:40pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/5 "2021-06-17T18:40:42Z")

</div>

@kevintparker  
https://{oktaOrgUrl}/login/signout?fromURI={redirected logout url} is not working now

It is always redirecting to the signout url configured in the Org setup.  
Settings\>Customization\>SignOut Page - which can have only one entry

Is there a way to provide a redirect uri. Thanks in advance

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [June 17, 2021, 8:48pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/6 "2021-06-17T20:48:32Z")

</div>

If you have a custom Sign Out Page configured, I don’t believe there is anyway to bypass this by passing a long a fromURI parameter

---

<div class="post-metadata">

**Author:** ![kare](https://avatars.discourse-cdn.com/v4/letter/k/4af34b/32.png) [@kare](https://devforum.okta.com/u/kare)\
**Post date:** [June 18, 2021, 2:34am UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/7 "2021-06-18T02:34:28Z")

</div>

Thanks for confirming  
I have two applications in the Okta org. App-1 can open App-2 (OIDC) in a new window.

When I click the logout in App-1 I am sending the user to the logout url https://{oktaOrgUrl}/login/signout

However AppB opened in the second window is retaining the session and continue working.

Is there a way to log out from both applications?

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [June 18, 2021, 4:29pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/8 "2021-06-18T16:29:46Z")

</div>

Not OOTB, no. Each application will be managing its own session, so while the /login/signout route can end a user’s session in Okta, it will not affect the sessions for any of the applications the user has logged into and these sessions would need to be terminated at each SP.

---

<div class="post-metadata">

**Author:** ![silviu08](https://avatars.discourse-cdn.com/v4/letter/s/e19adc/32.png) [@silviu08](https://devforum.okta.com/u/silviu08)\
**Post date:** [March 20, 2022, 9:53pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/9 "2022-03-20T21:53:35Z")

</div>

Thank you @kevintparker ! After a few hours of debugging, you saved me a couple more probably. Case sensitive, and don’t forget to add the url to the **Security \> API link** section.

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [March 21, 2022, 4:03pm UTC](https://devforum.okta.com/t/logout-case-sensitive/10690/10 "2022-03-21T16:03:54Z")

</div>

Closed on March 21, 2022, 4:03pm UTC


