What is Single Logout (SLO)?

What is Single Logout (SLO)?

Single Logout (SLO) is a feature of single sign-on (SSO) systems that allows users to log out of multiple applications or services with a single action. SLO is designed to provide a seamless and convenient user experience, while also improving security by ensuring that a user's session is terminated across all connected applications.

In SSO systems, once a user has been authenticated, they can access multiple applications or services without having to log in again. However, when the user logs out, they may still be logged in to some or all of the connected applications or services, leaving their account vulnerable to unauthorized access. SLO addresses this issue by providing a mechanism for the user to log out of all connected applications or services simultaneously.

SLO can be implemented using a variety of protocols, including SAML (Security Assertion Markup Language), OAuth (Open Authorization), and OpenID Connect. These protocols allow for the exchange of logout requests and responses between the identity provider and service providers, ensuring that all sessions associated with the user are terminated upon logout.

Back