Table of Contents

TSphinxWebLogin.LogoutAndEndSession Method

Logs out the user and terminates the SSO session at the identity provider.

Remarks

In addition to clearing the local tokens (like Logout), this method redirects the browser to the identity provider's end-session endpoint, which terminates the SSO session server-side. After this, other applications sharing the same SSO session will also require the user to log in again. If the identity provider does not advertise an end-session endpoint (e.g. the discovery document has no end_session_endpoint), the method behaves exactly like Logout and no redirect occurs.

Syntax

Unit: Sphinx.WebLogin

procedure TSphinxWebLogin.LogoutAndEndSession(const APostLogoutRedirectUri: string);

Parameters

<-> Parameter Type Description
const APostLogoutRedirectUri string Optional URI the identity provider should redirect the browser to after the SSO session is terminated. When empty (the default), no redirect is requested and the browser remains on the identity provider's post-logout page. The supplied URI must be registered as a valid post-logout redirect URI in the Sphinx client application configuration; otherwise the identity provider will reject the logout request.

See also