
xt2du (xt2du) asked a question.
I am working on SLO and found that SLO will go to sign in failed page in case 2.
- SSO first in browser. If I close all tabs which makes the login session cookie gone, then SLO tab will stay in sign in page.
2. SSO first in browser. If I keep all tabs, and then open a new tab for SLO url, it will go to sign in page and then use the session cookie to sign in again which will be failed.
My question is: is there any way I can make case 2 sign in failed go away? Clearing session cookie from my app may not be an option here.
Thanks,
Yanhua

Single logout means when a user logs out of one application, the user should be logged out of all the other applications the user has signed in using the same Identity provider session with a browser instance. There are different types of single logout depending upon where the request originates from.
Currently, Okta supports SP-Initiated Single Logout where a user logs out of an SP and is then logged out of Okta. SAML Single logout happens in the browser. When a user clicks logout in an application, the browser will do multiple redirects to clear every application's session the user has signed in to.