> The primary problem thus seems to be, that Microsoft calls > SAML2 IdP Logout endpoint inside an iFrame... There's nothing the IdP can really do about that (it also breaks our own logout flows). Logout in its current form is in its last days. -- Scott