Sorry, linked to the wrong documentation. This is correct: https://wiki.shibboleth.net/confluence/display/SP3/Logout And, users need to be redirected to https://your.app/Shibboleth.sso/Logout to initiate the process.