Dear auth0 team,
there are already a few tickets related to this topic:
- Log user out of all currently active sessions? - Auth0 Community
- OpenID Connect logout confirmation from Auth0 to APIGateway(RP) - Auth0 Community
- Implementing single logout - Auth0 Community
The following OpenID Connect draft specs (all dated 25th of January 2017) address the problem with different approaches:
- Final: OpenID Connect Session Management 1.0
- Final: OpenID Connect Front-Channel Logout 1.0
- Final: OpenID Connect Back-Channel Logout 1.0
What is your opinion on those specs and will you adopt any of them in the near future?
Thanks in advance,
cheers,
alex