---
schema_version: "1"
id: bf8d62f26d8e012450fac7b68c244040f12732aa4cab4435afd3ab4b3d1b33fd
title: Configuring Single Signout
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/access-management/single-log-out-task.md
canonical_url: https://docs.mulesoft.com/access-management/single-log-out-task
source_site: docs.mulesoft.com
content_type: documentation
content_hash: 774790f0ee3846df1b3f39eac6a31bb2b6b5faed871540633c45c4f7fb3b91ee
description: MuleSoft Documentation Site
latest: true
---
---
product: Access Management
version: master
---

# Configuring Single Signout

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

As Administrator, you can configure single signout if you use SAML. OpenID Connect doesn’t support
single signout. Using single signout, a user or user agent can sign out of an authenticated
environment and make sure that both service providers and identity servers process the signout
correctly.

The following procedure shows how to perform single signout and control where the user is redirected
after signing out. To redirect the user to a different page, set up the redirect in your
PingFederate configuration by adding a `redirect_uri` query parameter to the SLO Service URL.
Anypoint Platform routes the user to that page rather than to the Anypoint Platform sign-in page.

1.  In PingFederate, for example, click the SP Configuration for the Anypoint Platform.

2.  In **Browser SSO > Configure Browser SSO > SAML Profiles**, make sure that these fields are set:

    - IdP-Initiated SSO

    - IdP-Initiated SLO

    - SP-Initiated SLO

3.  In **Protocol Settings > Configure Protocol Settings**, configure a SLO Service URL with the
    following values:

    - Binding: POST

    - Endpoint URL

      Set `PARTNER_SP_ID` to the correct value:
      `https://anypoint.mulesoft.com/accounts/logout/receive-id`

4.  Redirect users to your sign-in page using the following URL:

    https://anypoint.mulesoft.com/accounts/logout/receive-id?redirect\_uri=https%3A%2F%2Fanypoint.mulesoft.com%2Faccounts%2Flogin%2Fyour-domain

    Alternatively, redirect users to your portal page using the following URL:

    https://anypoint.mulesoft.com/accounts/logout/receive-id?redirect\_uri=https%3A%2F%2Fanypoint.mulesoft.com%2Fapiplatform%2Fyour-domain%2F%23%2Fportals

5.  In **Allowable SAML Bindings**, click **Redirect**.

6.  In **Encryption Policy**, choose either **none** or **the entire assertions**, then save and
    exit Protocol Settings and Browser SSO.

7.  When viewing the SP Configuration for Anypoint Platform, go to **Credentials > Configure
    Credentials**.

8.  Set **Signature Verification Settings > Manage Signature Verification Settings > Trust Model to
    Unanchored**, and import the certificate from the following location:

    `http://docs.mulesoft.com/downloads/access-management/anypoint-platform-slo.pem`

9.  Make this certificate the active certificate.

## See Also

- [Configure SAML for SSO](https://docs.mulesoft.com/access-management/conf-saml-sso)