Amazon Connect SSO Logout

Here are the steps to configure single logout (SLO) for Amazon Connect using SAML 2.0:

When creating or editing the SAML identity provider (IdP) in your Amazon Cognito user pool, check the box labeled "Add sign-out flow" under the "Identity provider information" section.

From the "Sign-in experience" tab of your user pool, locate the "Federated identity provider sign-in" section and find the "Signing certificate". Download the certificate as a .crt file.

Configure your SAML IdP to support SAML single logout and request signing. Upload the user pool signing certificate obtained in the previous step to your IdP.

Ensure that your IdP is configured to redirect to the saml2/logout endpoint in your user pool domain when a user signs out.

By following these steps, you can enable single logout functionality for Amazon Connect when using SAML 2.0 for authentication.

https://docs.aws.amazon.com/connect/latest/adminguide/configure-saml.html https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-saml-idp-sign-out.html