We are using SAML provider in GCIP (SP) to integrate with Salesforce as external IDP. Our web application authentication happens via Firebase app (google identity toolkit proj) and works as expected. We want to destroy GCIP session and SAML SSO session when the user clicks on logout in application. We do not see any configurable property on SAML provider setting in GCIP to provider SAML Single Logout url. Invoking /gcp-iap-mode=GCIP_SIGNOUT shows that signout is happening but it is reauthenticating the user without credentials being requested. How can we achieve logout so that user will be forced to login again?
1.4m articles
1.4m replys
5 comments
57.0k users