Problem statement
SAML Logout request fails with “No active session(s) found matching LogoutRequest” error.
Symptoms
Setting Auth0 as SAML IDP, the logout does not work.
Cause
Auth0 only supports SessionID/Issuer and NameID. We don’t support EncryptedID or BaseID.
Solution
The SessionIndex
and NameID
values in the SAML Logout request need to match the ones received by the service provider in the original SAML assertion.