salvadorl.64510 (Customer) asked a question.
How to make a request SLO okta?
I am developing an application to use okta as a provider, I already made the signin with saml, but now I want to do the signout, I am making a request to the url
https://{URL_DOMAIN}.okta.com/login/signout?fromURI=http://localhost:5000
but it gives me a cors error
example:
await fetch (`https: //{URL_DOMAIN}.okta.com/login/signout? fromURI = http: // localhost: 5000`)
but when I do it this way it does not show me a cors error, but it responds with an empty object and does not perform the signout of okta
example:
await fetch (`https: //{URL_DOMAIN}.okta.com/login/signout? fromURI = http: // localhost: 5000`, {
'mode': 'no-cors',
headers: {
'Access-Control-Allow-Origin': '*',
}
})
Hello @salvadorl.64510 (Customer),
Okta only supports Service Provider-initiated SLO.
It is important to note a few things:
In situations where developers are using Okta for SAML logins, mainly in SP INIT logins to their web apps and they want to close out/log out the Okta session, the SAML wizard can be used and includes an option to setup Single-Logout (SLO).
You can learn more about this topic using the following links:
https://help.okta.com/en/prod/Content/Topics/Apps/Apps_Single_Logout.htm
If you need further assistance feel free to post this question on our Okta Developer Forums: https://devforum.okta.com, and they should be able to help you with this.
Regards,
Natalia
Okta Inc.
thanks, i will check it, but the pdf don't have point 3.7