Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It only takes a minute to sign up.
Sign up to join this community
I have Salesforce set up as an IdP, with a custom app acting as the SP. I have SP-initiated login via SAML implemented, following this guide.
I'd like to enable SP-initiated logout as well, but I cannot find any resources on this, except for this discussion which seems to indicate it is not supported - but this seems to be geared toward the scenario where Salesforce is the SP.
Can anyone clarify whether Salesforce as a IdP supports SP-initiated SAML logout requests?
It appears true SLO is not available, but we were able to implement a "poor man's" version of it:
SP-initiated logout: On the log out page of our custom app, we included a hidden IFrame to our-salesforce-community-url/secur/logout.jsp. A request to this will log the user out of Salesforce.
IdP-initiated logout: Per configuration, after logout the user is redirected to a logout page in our custom app, which causes them to be logged out.
