Okta initiated SAML logout, try 2

Questions SAML
1

Is there a way to start IdP initiated logout from Okta side?

Do I need to turned on “Front-channel Single Logout” and “Front-channel Single Logout for IdPs” for that?

2

In the context of SLO yes the “Front-channel Single Logout” feature needs to be enabled. Basically after the first SP-Initiated logout all other applications are logged out by Okta making a request to each app’s Logout Request URL.

Hope this helps!

3

If i understant you answer correctly: “There is no way to start IdP initiated logout from Okta side. It is only possible to start from one of the SP’s”.

Am I rephrased correctly?

4

If i understant you answer correctly: “There is no way to start IdP initiated logout from Okta side. It is only possible to start from one of the SP’s”.

Am I rephrased correctly?

5

I believe that’s correct

6

Thanks for your response.
And, now taking a step back to the “Front-channel Single Logout” feature.

Why did you wrote that it “needs to be enabled” for SLO to work? If I need SLO through back-channel, do i need to search another IdP (not OKTA) ?

7

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.