Does Okta support Single sign out?

Does Okta support Single sign out?

Single Logout (SLO) is a feature in federated authentication where end users can sign out of both their Okta session and a configured application with a single action. Okta supports this sign out process only when initiated by a Service Provider (SP). The SP sends the SLO request to Okta to end the Okta session.

Does Okta support back channel logout?

Back channel logout doesn’t seem to be supported right now. For achieving this behavior, you might have to make your app session rely on okta session. Your app session would be valid as long as okta session is valid. If the user wants to logout of the webapp, you might have to call delete /api/v1/session.

How to implement Single logout?

The Protocol

1. Step 1: The end-user initiates the SLO process by clicking a logout button within an SP.
2. Step 2: The SP terminates the user’s session and triggers SP-initiated SLO by sending a logout request to the IdP.

How to sign out of Okta?

Sign users out of Okta by ending their session on the Okta Authorization Server. This sends the user’s browser to the OIDC logout page, and then redirects back to the postLogoutRedirectUri that was specified in the config (or window.

What is SSO and SLO?

The SAML protocol is a popular choice for enabling SSO and contains a built-in feature called SAML Single Logout (SLO). This additional protocol helps address the problem of orphaned logins. SLO allows a user to terminate all server sessions established via SAML SSO by initiating the logout process once.

How do I clear my Okta session?

From the People page, find the user. Scroll down to click the user link. On the user’s profile page, find the More Actions button (Note: this will not appear if you are logged on as the user whose profile page you have loaded). From the More Actions drop-down menu, choose Clear User Sessions, as shown below.

How does a single logout work in Okta?

Single Logout (SLO) is a feature in federated authentication where end users can sign out of both their Okta session and a configured application with a single action. Okta supports this sign out process only when initiated by a Service Provider (SP). The SP sends the SLO request to Okta to end the Okta session.

How does single logout work in an application?

Single Logout in applications Single Logout (SLO) is a feature in federated authentication where end users can sign out of both their Okta session and a configured application with a single action. Okta supports this sign out process only when initiated by a Service Provider (SP). The SP sends the SLO request to Okta to end the Okta session.

How do I add SLO to an okta application?

In the Admin Console, go to Applications > Applications. Click the OIDC application where you want to add SLO. In the General settings tab, click Edit. Beside the Logout redirect URIs, click + Add URI. Enter the URI where Okta will send relying party-initiated SLO requests. Click Save.

Can a SWA application sign out an okta session?

Okta supports this sign out process only when initiated by a Service Provider (SP). The SP sends the SLO request to Okta to end the Okta session. SWA applications don’t support the SLO operation. SLO doesn’t sign the end user out of other integrations that may be open. Okta doesn’t sign out web applications.