SP Initiated Logout with failed IDP logout request

Cantor, Scott cantor.2 at osu.edu
Wed Jul 7 15:13:12 UTC 2021


If the logout request fails, then the user hasn't been logged out of anything but your SP. And closing a browser probably does nothing, that depends on settings.

>    What I am seeing is that the user seems to be able to directly log back in.

The log explicitly shows it forming and issuing a request to the IdP, which is definitely not "directly logged back in".

-- Scott




More information about the users mailing list