Logging out of apps with Single Sign-On (SSO)

Tags NetID sso

Single Sign-on (SSO) provides access to a large number of applications and services provided by Towson University. Please refer to this article first: Logging in with Single Sign-on if you are looking for help with how to log in and access apps and services.

Logging out of a Single Sign-On application ('log out') means ending your current session with that app. Sometimes, logging out of a single sign-on app may lead to outcomes that are confusing or unclear. Note: In most cases, the recommended action is to close your browser if you intend to sign out.


Here are some possible outcomes you may experience when you click 'log out' for a specific app.

  • Potential Outcome #1: You click 'log out' and you are successfully logged out of that app.
    • Initially this may seem straightforward, however, refreshing the page or revisiting the app may automatically log you back in. This is actually normal and expected for 'Single Sign-On'. This is especially true if you chose 'Stay signed in' when logging in initially.
    • What to do: This behavior is normal and expected. Recommended action is to close your browser and/or lock your device when you're done for the day.
 
  • Potential Outcome #2: You click 'log out' and you are logged out of ALL Single Sign-on apps.
    • You will likely be required to log back in the next time you want to access any other apps. This can be confusing or annoying if you're still working and accessing other apps.
    • What to do: Be aware that this app performs what's called a 'global logout'. Recommended action is to avoid clicking 'log out' for that particular app, and instead close your browser and/or lock your device when you're done for the day.
 
  • Potential Outcome #3: You click 'log out', and something else happens,
    • For example, you're shown an error message, or you're directed to a blank page, or maybe nothing happens.
    • What to do: Be aware that this app's developer/owner has not configured logout settings correctly. Recommended action is to avoid clicking 'log out' for that particular app, and instead close your browser and/or lock your device when you're done for the day.
 
Additional considerations:
  • 'Log out' functionality is generally developed by the app developer (the company or organization that created the app). Note: The Office of Technology Services doesn't always have the ability to improve/fix how 'log out' works for individual Single Sign-on apps. OTS is investigating methods to make logging out of Single Sign-On applications easier, simpler, and more predictable.
 
  • Certain apps that provide access to sensitive or privileged data may require you to sign in more frequently as a security enhancement. These apps will automatically log you out after a period of inactivity. You may need to log back in to these apps every 8 hours.
 
  • Using separate browser tabs for specific single sign-on apps, and closing them when you're done with them can make things easier. Following this guidance will provide a more consistent and predictable experience rather than clicking 'log out'.
 
  • On TU-managed Windows devices, your access to single sign-on apps is tied to your NetID login on that managed device.
    • For Single Sign-On apps, you will be prompted for sign-ins less frequently on TU-managed devices, especially when using Microsoft Edge browser (recommended).
    • To log off, just close your browser and/or lock your device.
    • When you access a single sign-on application you may not be prompted again to log into that app.
 
If you still have questions or need help, please submit a TechHelp ticket (Service - Active Directory & SSO).

Details

Article ID: 150350
Created
Thu 4/4/24 9:41 AM
Modified
Thu 4/4/24 3:16 PM

Related Articles (1)

This knowledge base article covers how to log in with Single Sign-on and how Faculty and Staff will use Duo for multi-factor authentication at login.