Can I use {organization_name} in the allowed logout urls list?

[oleksandr.burla]

I’m using {organization_name} in the allowed logout urls list but it keeps giving me error that my url is not allowed.

[gerald.czifra]

Hi @oleksandr.burla

Thank you for reaching out to us!

I understand how this can be confusing, but what is happening is that the Allowed Logout URLs list is a strict security allowlist that checks if the returnTo URL from the request is an exact match with any of the entries from the list. Adding the {organization_name} is possible, but needs to be added as a wildcard ( * ) in order to use this dynamic placeholder.

As such, if your Organization’s name is for example " acme ", the full logout URL that you wish to set would be " https://acme.myapp.com " and I believe that you might be inputting this as " https://{organization_name}.myapp.com ". In this case, in order to achieve your goal of having the dynamically set Organization’s name, you will need to add the URL as " https://*.yourapp.com "

I recommend looking through our following documentations for more information:

• Application Settings;
• Subdomain URL Placeholders.

Hope this helped!
Gerald