The Single Log out process will throw the following error when a user attempts to log out using Single Log Out:
FAILURE: Invalid nameID
- Single Sign On
- Single Log Out (SLO)
- Application assignment
This issue is caused by the different string values found in the application assignment compared to what the application expects.
The SSO will work as expected since the application may not treat the username as case-sensitive when matching the user.
However, when the single log-out is triggered, Okta will be required to match the string of the username from the app with the exact value in the application assignment
For example, for the user: "testTestingTest@tesT1".com in Okta, if the username on the app side is all lowercase, the SLO will fail.
The solution for this type of error is to apply a language expression for the application username format that will update the username into a lowercase string:
- First, review How to update the application username format with a custom expression.
- Then, use the following expression: String.toLowerCase(user.login).
NOTE: "user.login" can be replaced depending on the use case.
