SAP Knowledge Base Article - Public

2674251 - SSO - Information on SP-Initiated Logout function - BizX Platform


Customer is unsure of what this function does and if they want it enabled as part of their SSO setup

"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."


SuccessFactors BizX Platform


Info on SP-Initiated Logout:

  • This can sometimes be ignored when setting up SSO, which it shouldn’t.
  • Once the customer has logged in successfully, it is important to ask them what their expected logout behaviour is.
  • The customer has authenticated themselves with their Idp whilst logging in.
  • When logging out, they may just want to end the active SP (SuccessFactors) session but remain logged into their Identity provider. In this case, we would set SP-Initiated Logout to ‘No’.
  • This is because the customer may have many other applications besides SuccessFactors using the active Idp session to authenticate them into their various other applications
  • If we set SP-Initiated Logout to ‘Yes’, when the customer logs out of SuccessFactors, they also terminate the active Idp session.
  • This means the user will now be prompted for Idp credentials when they attempt to SSO into another application.
  • Depending on the customers needs, we should set this field accordingly.
  • See the screenshot and definitions below.


Support SP Initiated logout:
Enable or disable this feature

SP Sign logout request:
Do we want to sign the logout request (customer decides)

SP Validate logout response:
Do we want the SP to validate the logout response from IdP (customer decides)

Global logout service URL:
The customer URL for the logout endpoint. (Provided by customer)


SP-Initiated Logout, Logout behaviour, SP Initiated Logout , KBA , LOD-SF-PLT , Foundational Capabilities & Tools , LOD-SF-PLT-SEL , SSO Errors & Logs , LOD-SF-PLT-SAM , SAML SSO First Time Setup , How To


SAP SuccessFactors HCM Suite all versions