RobM.62038 (Customer) asked a question.
We are using Okta in an inbound federation scenario where it is configured as a Service Provider (SP) that communicates via SAML with an external IdP. The setup is configured using the Okta Identity Provider configuration screen. We have had a great deal of success with this configuration for login scenarios. When the user navigates to our application Okta communicates via SAML with the third party IdP. The IdP displays a login screen, authenticates the user, and sends the SAML response to complete the login. Logout has been a problem in this configuration. When users logout of our OIDC application we logout of Okta but we cannot figure out how to initiate a single logout (SLO) to the third party IdP. As a result the user is not prompted for credentials the next time they navigate to our application. The Okta Identity Provider screen does not have any way to configure a SLO URL that I can find. Is SLO supported in this configuration? If so, how do I configure my Okta SP to make it work?
Hi @RobM.62038 (Customer) , Thank you for reaching out to the Okta Community!
This is currently not supported. Reference article:
https://help.okta.com/en-us/Content/Topics/Apps/Apps_Single_Logout.htm
You can suggest this as a Feature Enhancement on the Okta Community page by going to the Community→ Ideas tab. Features suggested in our community are reviewed and can be voted and commented on by other members. High popularity will increase the likelihood of it being picked up by the Product Team and it being implemented.
More details here:
https://support.okta.com/help/s/blog/a674z000001cj7YAAQ/okta-ideas-faq?language=en_US
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.