What does the Okta Single Logout URL really do?

Questions SAML
2

Hello,

The SLO URL is the URL where Okta will POST too after the SAML SP sends a logout request to Okta, see Configure Single Logout in app integrations | Okta

Single Logout URL — the URL for the SLO return. This is a URL on the service provider where Okta sends its sign out response (as a POST operation). If the SP doesn't have a specific SLO URL, the main SP URL can be used.

The SP would initiate the logout using the IdP (Okta) SLO endpoint.
This can be retrieved by,

  1. In the Sign On settings tab, on the Settings panel, click View Setup Instructions.
  2. The page that appears shows the Identity Provider Single Logout URL. Copy this URL and add it into the configuration settings back in your SP application.

Sample of a sign out request sent by the SP, SAML Logout Request Examples | SAMLTool.com
Sample of a sign out reply returned from an IdP, SAML Logout Response Examples | SAMLTool.com

1 Like