SAML Connection SP Initiated Logout Redirects to Different Application

Knowledge Solutions
, , , , ,
1

Problem Statement:

Browser is being redirected to a different application when logging out of a SAML connection.

Steps to Reproduce:

  1. Log in to Application 1
  2. Log in to Application 2 in another browser tab
  3. Log out from Application 1
  4. As part of logging out from Application 1, the user is redirected to Application 2

Solution:

This behavior is expected when you have more than one application working with the same SAML connection.

The SP will initiate SLO by sending a SAML logout request to the following endpoint:

https://YOUR_DOMAIN/samlp/CLIENT_ID/logout

Auth0 will use the logout response to look up the user’s session. If the user has sessions with other SAML SPs, Auth0 will redirect the user to those SPs.

Reference: