Greetings,

I'm trying to figure out behavior of Single Logout when using a third-party identity provider with two Salesforce orgs which are service providers. Assuming I have all three systems configured correctly, I expect that if I click logout from one of the Salesforce service providers, the result should be being logged out of the third-party identity provider and also the "initiating" Salesforce service provider and also the "clueless" Salesforce service provider. The reality is that I get logged out of the third-party identity provider and also the initiating Salesforce org, but I remained logged into the clueless Salesforce service provider.

By using a browser plugin (named SAML Tracer), I see all the "hops" between the three systems. It's interesting that even though SAML Tracer reveals that the clueless Saleforce service provider logout url is included in the hops, it does not get logged out.

Can multiple Salesforce service providers participate in Single Logout? If so, please point out where my errors may be.

Thanks

Paul