We use an external identity provider to verify credentials with SSO via OpenID Connect to Salesforce Experience Cloud as the Relying Party. After the the person logs out from Site A, he should be logged from Salesforce as well:

  1. User connects to Site A and logs in via external identity provider
  2. User click on button X, he will be redirected to Experience Cloud ( after some verification )
  3. Logout from Site A

Expected: in step 4, user is logged out from Experience Cloud site

  • 1
    You have the right idea but the devil is in the details, including your other, non-Salesforce party. This makes it a not-so-great question for this forum. If you followed all the steps in OIDC SLO, you should check if SLO is being correctly initiated when you "disconnect" from Site A.
    – identigral
    Commented Sep 14, 2023 at 19:09
  • 1
    How to do this? Read the OIDC SLO spec, then capture the trace, decode it and see if it matches the spec. From there you might be able to say which party is at fault. If it appears to be a SF-side issue, you should open a support case.
    – identigral
    Commented Sep 14, 2023 at 19:10
  • i'm using Gravitee as SSO and gravitee doesn't support SLO ..
    – Fark
    Commented Oct 1, 2023 at 19:55


You must log in to answer this question.