SSO - Cannot Log Out

I have set up SSO, using WordPress as the provider. The log in process works as expected; however, the log out process does not work. When I click “Log Out” from the Discourse menu I do see a modal confirming logout, but then I am automatically logged back in when the page refreshes. Is there a way to fix this so that clicking “Log Out” actually logs the user out of Discourse?

Related: The authentication request that Discourse makes to WordPress only has sso and sig args, so there’s no way for me to check on the provider side if the request is a logout request since the signature looks identical to a login request.

This will happen if the login required setting is enabled on your Discourse site. To get users logged out of Discourse, they also need to be logged out of the WordPress site. To log users out of WordPress, set the Discourse logout redirect site setting to https://example.com/?request=logout, with your domain name substituted for example.com.

5 Likes

Perfect! Adding the logout redirect was exactly what I was looking for. Thanks!

2 Likes