Users are logged in automatically after they log out from Okta when DSSO is enabled.

• Agentless Desktop Single Sign-on
• IWA Web agent for Desktop Single Sign-on

When the user logs out from Okta, they are redirected to the sign-on page, which triggers the DSSO to authenticate the user one more time. This is expected behavior.

As a workaround, to make Okta redirect end-users to a custom sign-out page, follow the steps below:

1. From the admin dashboard, navigate to Customizations > Brands.
2. Click on the Okta subdomain.
3. Go to Settings.
4. Click Edit on the Sign-Out Page.
5. Enter the desired Sign-Out Page URL.
6. Click Save.

NOTE: These changes will apply to all users, meaning that if any user signs out from Okta, they will be taken to the specified Sign-Out Page URL added in step 5.