This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 54%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I have Configured the Authentication of SharePoint 2019 Kerberos and Created a Non-Claims Aware Relying Party Trust on ADFS behind Web Application Proxy with Kerberos Constrained Delegation.
now the sign in page and authentication Works as expected, But the Sign out from the SharePoint web site is not getting completed,
Read some post on the internet and found to use the below Powershell cmd, but it is not working on the sharepoint 2019 On-Premise
Read Some post related to Sharepoint2010 but that does not help.
FYI , If i go through WAP & ADFS the SharePoint allows inside without asking credential, but if directly access the SharePoint server it is asking password, so SharePoint logout but ADFS doesn't know that the user has already logged out.
how can i route the Logout URL to ADFS in my SharePoint Environment environment
Please suggest how to fix the sign out issue
Hi, @ananpeculiar ,
For your issue, I will suggest you to open a support ticket about it. It needs more detailed investigation with support team instead of simple troubleshooting via replies in forum. And we will appreciate it if you can update your findings here.
FYI ,If i go through WAP & ADFS the sharepoint allows inside without asking credential, but if direclty access the sharepoint server it is asking password, so sharepoint logout but ADFS doesnot know that the user has already logged out. how can i route the Logout URL to ADFS in my environment
You can't "log out" of a Windows Integrated Authentication session. Kerberos/NTLM are stateless protocols.
So what would be your suggestion on this, i have followed your idea how-to-use-custom-login-page-aspx-as-link-fba-for.html to setup my SharePoint environment to use the integrated windows authentication through ADFS, it is working like a charm but only the sign out is making things stop.
You would need to force all sessions through SAML or FBA.
With that said, what is your end goal? What are you really attempting to accomplish or accommodate for?
Due to not signing out completely , the SharePoint allows the user to login without asking credential next time as the ADFS doesn't know about the user has been signed out. so this is a security concern for who accessing the SharePoint from outside office. can't we set the Option for the signout.aspx to let ADFS know about this sign out? i feel this is a bug from the Microsoft SharePoint Server 2019. If there is a Login Via ADFS there should be a way to logout?