Idp initiated SLO

[nadia.zyborska]

I am trying to set up SLO for my SAML connection and have been finding it difficult.

This question is specifically for Idp initiated sign out where auth0 is the SP:

When I click setup in the enterprise saml connection I can see the SLO url with the following details:

SingleLogout service URL
This is where the SAML identity provider will send logout requests and responses:
   `url.com/logout`
SAML logout requests must be signed by the identity provider.

I am confused as to how this will then trigger the user to be signed out of my application? Is there a callback?

Thanks,

Nadia

[gerald.czifra]

Hi @nadia.zyborska

Thank you for reaching out to us!

I highly recommend you read through the following Knowledge Article on Federated Logout and Single Logout (SLO) which describes the behavior and overall process when Auth0 acts as the SP and also when it’s the IdP. Although this doc is admittedly a little older, the general flow remains largely the same.

Hope this helped!
Gerald