Allow Query Parameters for Okta OIDC Application Front Channel SLO Configurations
Last Updated:
Overview
OpenID Connect (OIDC) applications support the configuration of a Front Channel Single Logout (SLO) URL. By default, Okta removes any query parameters from this URL during an SLO event. To resolve this behavior, contact Okta Support to enable a feature that preserves these query parameters. When an SLO event triggers, Okta unexpectedly strips the query parameters from the Front Channel SLO endpoint URL.
Applies To
- Okta Identity Engine (OIE)
- OpenID Connect (OIDC)
- Front Channel Single Logout (SLO)
Cause
The default behavior in Okta excludes any query parameters present in an OIDC application Front Channel SLO endpoint when an SLO event triggers.
Solution
How does Okta preserve query parameters for Front Channel SLO configurations?
Open a support case with Okta Support to request the enablement of the feature that preserves the query parameters in the Front Channel SLO endpoint for Okta Identity Engine (OIE) organizations.
