> Both trackSPSessions and secondaryServiceIndex properties have to be true. Just linking to the documentation : https://wiki.shibboleth.net/confluence/display/IDP30/Logout+and+SLO