Sign-Off URI Handling Refined for Non-Ping IdPs
Release
Author:
Yulia Andreyanova
Changed on:
5 June 2025
| Target release date: | 2025-06-10 |
|---|---|
| Release status: | Released |
Description
The release improves behavior around identity provider (IdP) sign-off flows. For all non-Ping IdPs, the `signOffUri` is now used as-is, without the `id_token_hint`. This update removes the need for custom workarounds, ensures proper Single Logout (SLO) behavior, and prevents sign-out failures caused by incompatible token handling.
Changelog
Identity Provider Sign-Off Flow Adjustments:
- When using Ping Identity as the IdP, the
`id_token_hint`is still appended to the`signOffUri`. - When using any other IdP, the
`signOffUri`is respected without appending`id_token_hint`.
| Released capability depth: | Enhancement |
|---|---|
| Release bundle / Capability type: | Platform |
