VincentS.85812 (Customer) asked a question.
Is there a SignOff URL I can redirect to when a user logs out of my application?
When a user logs out of my application they are currently returned to the application's default login page. If anyone enters any credentials (right or wrong) into that page it redirects them to the OKTA SingleSignOn URL - which has cached credentials for the last user who logged in - and the application opens.
Is there a SignOff URL that I can redirect the user to upon logout to prevent this security problem?
Hi Vincent,
For this scenario we recommend using Single Logout (if your app supports it). With this the user logs out from the app, then gets logged out from Okta as well. Also in this case the bast practice is to not have the credentials stored/ cached in the used browser.
Alexandru Moraru
Technical Support Engineer
Okta Global Customer Care
Is there a SignOff URL that I can redirect the user to upon logout to prevent this security problem?
Regards,
Vincent
Hi Vincent,
At the moment no, the sign off process is out of Okta's scope. We can not point the app where to go after the user gets signed off, you can either built a flow or reach out to the Service Provider.
Alexandru Moraru
Technical Support Engineer
Okta Global Customer Care
During the Application registration process within OKTA for SAML 2.0, there is a Single Sign On URL generated. Clicking on that link anywhere takes the user to that application via an OKTA Login Prompt if needed.
The logout process of our application allows me to specify a landing URL to send the user to after they logout of the application.
Is there a Single Sign Out URL available for the application similar to the Single Sign On URL mentioned above? If there is, I can configure the application to go to that URL and everything will be good.
Regards,
Vincent
Hi Vincent,
At the moment we don't have such a feature. We only provide Single Logout option which has a SLO URL, points back to Okta and signs off both Okta and App sessions. For more details or troubleshooting please open a support ticket.
I have found where I can set that but I don't think I want to be logging people out of all apps. I will leave it for now.
Thanks for your help
You can close out the ticket
Regards,
Vincent
In case anyone else comes across this looking for a logout solution when true SLO is not available, you can use https://oktaorg/login/signout to log the user out of Okta.