Signout is working for us, I initially used the same guide but had to make some changes. My setup differs in the following places: Include OneTimeUse Condition - off Optimize REDIRECT signing key lookup - off SAML Signature Key Name - NONE Bse URL - /auth/realms/{realmname}/protocol/saml/clients/googleapps (note the lack of &RelayState=true) I set the signout URL in the Google Apps dashboard to https://ourdomain.tld/auth/realms/{realmname}/account/ On 19 June 2018 at 22:12, Rodolfo De Nadai <rdenadai(a)gmail.com&gt; wrote: > Hi, > > i'm configuring my keycloak installation as an IdP and Google apps as an > SSO. > > I'm able to login but when trying to logout i got no success... > > My configuration follows the described here: > > https://stories.scandiweb.com/sign-in-to-google-apps-using-saml-protocol-... > > There were a thread in the mailing list which was able to login also, but > didn't mention logout process. As i thought it should be almost as > transparent, since no documentation say anything, is begging to transform > in a problem. > > If someone could help or point in some direction i appreciate. > > thanks > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user > -- Tiemen Ruiten Systems Engineer R&D Media