Hello @HussainR.03456 (Customer)​ 

Thanks for posting.

For SAML applications, the SP must be able to send an SLO request to Okta as a POST request and it must be signed.

If you are using Okta for Single Sign-On (SSO) and you want to close and sign out of the Okta session, you can use the SAML Application Integration Wizard to configure SLO:

1. In the Admin Console, go to Applications > Applications.
2. Click the SAML application where you want to add SLO.
3. In the General settings tab, on the SAML Settings panel, click Edit.
4. In the SAML configuration wizard, click Next to move to step 2 Configure SAML.
5. On the Configure SAML page, click Show Advanced Settings.
6. Select the check box to Allow application to initiate Single Logout.
7. Single Logout URL — the URL for the SLO return. This is a URL on the service provider where Okta sends its sign out response (as a POST operation). If the SP doesn't have a specific SLO URL, the main SP URL can be used.
8. SP Issuer — the identifier for the application. This can be an ACS URL or the SP Entity ID. This value is also included in the metadata sent in the SLO request from the SP application.
9. Signature Certificate — Okta requires a digital signature for the SLO request. You need to upload a copy of the signature certificate or CA that the SP is using to sign the SLO request.
10. Click Next.
11. Click Finish.

All steps and additional information here:

https://help.okta.com/en/prod/Content/Topics/Apps/Apps_Single_Logout.htm

Additionally, Sign users out dev document:

https://developer.okta.com/docs/guides/sign-users-out/android/main/

Typical workflow for deploying SharePoint (On-Premises)

https://help.okta.com/en/prod/Content/Topics/DeploymentGuides/Sharepoint/Guide/deploy-sharepoint.htm

Let us know if this helps you.

Daniela Chavarria.

Okta Inc.