SAML Logout request fails with "No active session(s) found matching LogoutRequest" error

Problem statement

SAML Logout request fails with “No active session(s) found matching LogoutRequest” error.

Symptoms

Setting Auth0 as SAML IDP, the logout does not work.

Cause

Auth0 only supports SessionID/Issuer and NameID. We don’t support EncryptedID or BaseID.

Solution

The SessionIndex and NameID values in the SAML Logout request need to match the ones received by the service provider in the original SAML assertion.