Inquiry Regarding Azure AD Support for Signed Logout Response and Certificate Usage

Question

I am writing to inquire about the support and configuration details related to the Single Logout (SLO) functionality in Azure Active Directory (Azure AD).

Specifically, I would like to confirm whether Azure AD supports Signed Logout Response as part of its Single Logout feature. If so, I am interested in understanding which certificate is utilized for signing the logout responses.

Answer 1

Hi @EAA SQA

Thanks for reaching out to Microsoft Q&A.

Yes, Entra ID (former Azure AD) does support Single Sign Out for SAML applications.

The documentation below has the flow and the details about how the communication between the app and Entra occurs after user clicks on "sign out" button. The certificate used is the token signing one which is created when the Application object is added on Entra ID:

https://learn.microsoft.com/en-us/entra/identity-platform/single-sign-out-saml-protocol

You'll find more information about the sign in certificate in the documentation below:

https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/certificate-signing-options

Let me know if you have further questions.

Thanks,

Fabio

Answer 2

Hi @EAA SQA

I just wanted to check in and see if you had any other questions or if you were able to resolve your issue.

If you have any other questions, please let me know.

Thanks,

Fabio

Answer 3

Hi @EAA SQA

I just wanted to check in and see if you had any other questions or if you were able to resolve your issue.

If you have any other questions, please let me know.

Thanks,

Fabio

Answer 4

Hi @EAA SQA

I just wanted to check in and see if you had any other questions or if you were able to resolve your issue.

If you have any other questions, please let me know.

Thanks,

Fabio

Answer 5

Hi @Fabio Andrade ,

Thanks for your reply.
Could you please provide more info on SAML LogoutResponse?

Is it possible to send the signed logout response from Azure AD ?
If yes, then can you help us with the guidance page or any reference.

Thanks,
Shekhar Chandra