t8320 (t8320) asked a question.
I develop an application which uses SSO to allow users to sign in and SLO so that when a user logs out they are also logged out of their IDP. When testing this with Okta we ran into an issue. We store the users nameId downcased however I have a user whose nameId include capital letters on okta. While we have solved for this problem with the login flow when they attempt to log out we get the error status Authnfailed in response and oktas logs indicate that the single logout request failed due to "User single sign out from app FAILURE: Inavlid nameID" (side note you have a typo in this error message) I manually forced this user to have a nameId on our application side that matches the capitalization on oktas side and the flow worked correctly so my assumption is that this flow is case sensitive my default. Is there any way to allow the single logout flow to be case insensitive?
Hi @t8320 (t8320) , Thank you for reaching out to the Okta Community!
There currently is no specific function for case insensitivity, but depending on any other app requirements that you might have in the environment and potential impact, perhaps you can look into using a custom expression language function if you haven't already.
Something like String.toUpperCase or String.toLowerCase .
See Okta Expression Language documentation for details.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
Headed to Oktane? Here's what you can expect, plus all the Okta tips you may have missed this month