SingleLogout

Configuration of a single logout flow through the DXA system.

Description

Description of the configuration object

Is whitelist

Whether the SLO peers are treated as a whitelist (true) or a blacklist (false).

  • checked (true): Only the SLO peers listed will be logged out during single logout.

  • unchecked (false): All SLO peers will be logged out during single logout) except those listed.

Invalidate DXA session during logout

Whether the DXA session is invalidated (logged out) during single logout, or if user consent is required.

  • Allowed Values:

    • ALWAYS

    • REQUIRE_CONSENT

    • NEVER

SLO peers

List of references to Logout peers. These are used to specify what can/cannot be logged out during a single logout triggered from an endpoint that references this Single logout configuration. If this is treated as Whitelist of Blacklist is based on the 'Is Whitelist' configuration.

Consent SLO peers

List of references to Logout entries that will require consent to logout.

Default post logout redirect URL

The default URL to redirect the user to after the single logout process is completed. It is used if the initiator of the logout does not provide a specific redirect URL.

Number of backchannel retries

The number of retry attempts for backchannel logout requests in case of failure.

Backchannel retry interval in seconds

The time interval in seconds between backchannel logout retry attempts.

Logout consent peers in UI-less scenarios

Indicates whether to perform logout for DXA session (if set to 'REQUIRE_CONSENT'), and consent SLO peers tokens, when the logout is initiated from incoming logout notification, where there is no UI to ask for consent (DXA is RP and is notified by frontchannel/backchannel). If set to true, the DXA session if set to consent and consent SLO peers will be logged out without user interaction. If false, the DXA session if set to consent and consent SLO peers will not be logged out in such scenarios.