# What does the Okta Single Logout URL really do?

**URL:** <https://devforum.okta.com/t/what-does-the-okta-single-logout-url-really-do/24705>\
**Category:** SAML\
**Created:** [June 28, 2023, 2:35pm UTC](https://devforum.okta.com/t/what-does-the-okta-single-logout-url-really-do/24705 "2023-06-28T14:35:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![tlee](https://avatars.discourse-cdn.com/v4/letter/t/258eb7/32.png) [@tlee](https://devforum.okta.com/u/tlee)\
**Post date:** [June 28, 2023, 2:35pm UTC](https://devforum.okta.com/t/what-does-the-okta-single-logout-url-really-do/24705/1 "2023-06-28T14:35:42Z")

</div>

I have already set up Single Logout on an Okta application.

![image](https://global.discourse-cdn.com/oktadev/original/2X/5/5c0fec5be734a841cacc651d2c5c561605d6e5f8.png)

And I am able to see Single Logout URL being generated by Okta.

As a developer of a service provider implementation, what do we do with this URL?

- Redirect the user to this SLO URL?
- Send an empty POST request to this SLO?
- Send a POST request with some payload of some kind to this SLO?
- We embed this in the HTML as an embedded iframe?

There aren’t a lot of information about what we do with this SLO URL, other than knowing that “we have to provide the SP this SLO URL” and everything else is vague and unclear. What does this SLO URL really do for us?

Thanks.

---

<div class="post-metadata">

**Author:** ![erik](https://avatars.discourse-cdn.com/v4/letter/e/b5ac83/32.png) [@erik](https://devforum.okta.com/u/erik)\
**Post date:** [July 12, 2023, 6:54am UTC](https://devforum.okta.com/t/what-does-the-okta-single-logout-url-really-do/24705/2 "2023-07-12T06:54:00Z")

</div>

Hello,

The SLO URL is the URL where Okta will POST too after the SAML SP sends a logout request to Okta, see [Configure Single Logout in app integrations | Okta](https://help.okta.com/en-us/Content/Topics/Apps/Apps_Single_Logout.htm)

```auto
Single Logout URL — the URL for the SLO return. This is a URL on the service provider where Okta sends its sign out response (as a POST operation). If the SP doesn't have a specific SLO URL, the main SP URL can be used.

```

The SP would initiate the logout using the IdP (Okta) SLO endpoint.  
This can be retrieved by,

1. In the Sign On settings tab, on the Settings panel, click View Setup Instructions.
2. The page that appears shows the Identity Provider Single Logout URL. Copy this URL and add it into the configuration settings back in your SP application.

Sample of a sign out request sent by the SP, [SAML Logout Request Examples | SAMLTool.com](https://www.samltool.com/generic_slo_req.php)  
Sample of a sign out reply returned from an IdP, [SAML Logout Response Examples | SAMLTool.com](https://www.samltool.com/generic_slo_res.php)

---

<div class="post-metadata">

**Author:** ![andrea](https://sea1.discourse-cdn.com/oktadev/user_avatar/devforum.okta.com/andrea/32/2172_2.png) [@andrea](https://devforum.okta.com/u/andrea)\
**Post date:** [February 15, 2024, 5:48pm UTC](https://devforum.okta.com/t/what-does-the-okta-single-logout-url-really-do/24705/3 "2024-02-15T17:48:29Z")

</div>