Customer is unsure of what this function does and if they want it enabled as part of their SSO setup
"Image/data in this KBA is from SAP internal systems, sample data, or demo systems. Any resemblance to real data is purely coincidental."
SuccessFactors BizX Platform
Info on SP-Initiated Logout:
- This can sometimes be ignored when setting up SSO, which it shouldn’t.
Once the customer has logged in successfully, it is important to ask them what their expected logout behaviour is.
The customer has authenticated themselves with their Idp whilst logging in.
When logging out, they may just want to end the active SP (SuccessFactors) session but remain logged into their Identity provider. In this case, we would set SP-Initiated Logout to ‘No’.
This is because the customer may have many other applications besides SuccessFactors using the active Idp session to authenticate them into their various other applications
If we set SP-Initiated Logout to ‘Yes’, when the customer logs out of SuccessFactors, they also terminate the active Idp session.
This means the user will now be prompted for Idp credentials when they attempt to SSO into another application.
Depending on the customers needs, we should set this field accordingly.
- See the screenshot and definitions below.
Support SP Initiated logout:
Enable or disable this feature
SP Sign logout request:
Do we want to sign the logout request (customer decides)
SP Validate logout response:
Do we want the SP to validate the logout response from IdP (customer decides)
Global logout service URL:
The customer URL for the logout endpoint. (Provided by customer)
SP-Initiated Logout, Logout behaviour, SP Initiated Logout , KBA , LOD-SF-PLT , Foundational Capabilities & Tools , LOD-SF-PLT-SEL , SSO Errors & Logs , LOD-SF-PLT-SAM , SAML SSO First Time Setup , How To