Feature Request Overview

Logout from Horizon has traditionally be separate from SSO logout, i.e. when a user logs out from Horizon they are not logged out of their SSO session. There has however been a request from customer to be able to configure logout in Horizon to also trigger a complete SSO logout. There is currently support for this when there is only one login method https://docs.openstack.org/horizon/latest/configuration/settings.html#websso-default-redirect-logout but this should also be supported when multiple log in methods are configured

This is a feature request to allow for configuration of the logout to also log the user out of the SSO session even when multiple login methods are in use.

Business justification

This has been requested from customers since they find the current behavior confusing. Not being logged out correctly could lead to some bad experiences for our customers so allowing them to configure the function to work as they expect is important

Functional requirements 

• The current behavior should still be available and the default behavior
• It shall be possible to configure the log out action from Horizon to also log the user out of the SSO session

Describe the customer impact

• Earlier bug reported (https://issues.redhat.com/browse/OSPRH-15245)