Configuring global single logout - PingAccess - PingFederate - 6.3

Configuring global single logout - PingAccess - PingFederate - 6.3 - 10.3

Use Cases

bundle

solution-guides

ft:publication_title

Use Cases

Product_Version_ce

category

ContentType

howtodoc

ContentType_ce

How-to

Learn how to revoke global sessions with single logout (SLO) in the PingFederate administrative console.

Make sure the identity provider (IdP) adapters have their Session State set to Globally in PingFederate.

To revoke global sessions with SLO:

In the PingFederate administrative console, go to Applications > Integrations > Default URLs > SP Default URLs.
To allow TargetResource as a redirect URI in PingFederate, enter and edit the URL in the Provide The Default URL You Would Like to Send The User to When Single Logout (SLO) Has Succeeded field.

The TargetResource is the landing page PingFederate directs the user to after logout, for example, http://pf01.pinglab.com:9331/idp/startSLO.ping?TargetResource=://pa01.pinglab.com:3000/PingAccessQuickstart/.

Note:
The TargetResource must be an allowed redirect URI in PingFederate.
Click Save.

PingFederate automatically redirects to the PingAccess logout endpoint pa/oidc/logout.