Does Okta Support IdP-Initiated Single Log-Out
Apr 21, 2025
Single Sign-On
Okta Classic Engine
Okta Identity Engine
Overview
This article addresses whether Okta supports Identity Provider (IdP)-Initiated Single Log-Out (SLO).
Applies To
- Single Log-Out (SLO)
- Identity Provider (IdP)
- Service Provider (SP)
Solution
Okta supports IdP-initiated Single Logout (SLO) in the following manner:
When a user initiates logout from a Service Provider (SP), Okta processes that SP-initiated request and subsequently directs logout signals to any other SLO-participating applications. This means that even though the logout began at the SP, Okta actively participates in a broader single logout process. This communication between Okta and the other applications occurs via front-channel logout, utilizing the user's browser.
