SP initiated SAML single logout
Starting from version 9.1.02, Remedy Single Sign-On (Remedy SSO) supports Service Provider (SP) initiated single logout. When a user logs out from an application that is integrated with Remedy SSO, the user gets logged out from applications of all Service Provider sites that have an SSO session. To support the single logout feature, you must enable the feature when you configure the SAML authentication.
SP initiated SAML single logout workflow
|1||User clicks a logout link of an application that is integrated with Remedy SSO and that has a single sign in session.|
|2||Remedy SSO sends a logout request to the Identity Provider (IdP).|
|3||IdP sends the logout response to Remedy SSO.|
|4||Remedy SSO logs out the user by deleting the application session and authentication cookies.|
|5||Remedy SSO redirects the browser to a logout URL.|