Performing Single Logout

Spring Security’s SAML support includes a logout feature that requires some configuration.

You can use OpenSSL to create a private key and certificate. Ensure you provide a value for at least one of the questions during the process, and the setup should be successful.

openssl req -newkey rsa:2048 -nodes -keyout rp-private.key -x509 -days 365 -out rp-certificate.crt

Copy the generated files to your app’s src/main/resources/credentials directory.

Configure in application.yml, the generated key, the certificates location and the IdP’s logout configuration similar to the following:

spring:
  security:
    saml2:
      relyingparty:
        registration:
          okta:
            signing:
     ...