0

We are using Single-Sign-On from Salesforce.

So Salesforce SSO acts as the IdP (Identity Provider) while an external service acts as the SP (Service Provider).

When a user successfully logs in in SP via the SSO, his browser stores:

  1. A IdP session
  2. A SP session

When this user tries to log out, SP side can successfully revoke the SP session.

Question is: how to revoke the IdP session on the same go?

Does Salesforce SSO supply an endpoint for SP to call to fulfil this? I assume that SP doesn't know the IdP session value at all.

1

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.