Configuring for Local Rather Than Global Logout

By default, when Identity Server receives a logout request, it logs out the user from all identity providers and service providers to which the user has authenticated. If you want that the logout request logs out the user only from Identity Server and keep the user logged in to identity providers and service providers, add the following query string to the logout URL:

?local=true

The logout URL has the following format:

<Base_URL>/app/logout

Replace <Base_URL> with the base URL of your Identity Server. If the base URL of your Identity Server is https://hhb1.provo.novell.com:8443/nidp, the following is your local logout URL:

https://hhb1.provo.novell.com:8443/nidp/app/logout?local=true

To modify the logout.jsp file so that it performs a local logout, perform the following steps:

For information about how to modify a file, see Modifying Configurations.

  1. In the logout.jsp file, find the following line:

    <form method="post" target="_top" action="<%= request.getContextPath() %>/app/logout">
  2. To the /app/logout string, add ?local=true similar to the following:

    <form method="post" target="_top" action="<%= request.getContextPath() %>/app/logout?local=true">