# Session timeout with SSO

**URL:** <https://meta.discourse.org/t/session-timeout-with-sso/110211>\
**Category:** Bug\
**Created:** [February 27, 2019, 6:55am UTC](https://meta.discourse.org/t/session-timeout-with-sso/110211 "2019-02-27T06:55:53Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [March 1, 2019, 4:01am UTC](https://meta.discourse.org/t/session-timeout-with-sso/110211/2 "2019-03-01T04:01:28Z")

</div>

Interesting bug, we usually send an HTTP header back saying you have been logged out, but if that redirects and the client can not follow the redirect it is probably not getting the header.

@david can you add to your list to investigate this.

- Site requires login
- Site has SSO defined (you can point local at meta or something)
- You are on latest page
- You delete cookies

What should happen is we should pop up the dialog saying you were logged out. But maybe the redirect is throwing the internals off.

---

_[View the full topic](https://meta.discourse.org/t/session-timeout-with-sso/110211)._