Canvas SSO/ SAML SLO (logout behavior)

[limerdm]

Greetings, 

I have 5 different authentication methods active for our Canvas instance.  The direct canvas login, and 4 separate SAML providers (we have 4 different communities that all can SSO into Canvas).

The mistake(?) I made was thinking the logout URL for each SAML provider could be different and it would be respected based on which provider the user came in via.  

What I think I see in practice is that on logout the FIRST defined SAML provider (in order by the Position setting) is the one that whose Logout URL is used.  It seems that Canvas does not "remember" which SAML provider was used on login, only that a SAML provider was used as opposed to the Canvas direct method.

1. Do I understand this right/is this an accurate description of the current process?  Or if not, please point me to better docs etc as I haven't found anything definitive as of yet.

2. If it is accurate, can/will Canvas be made to remember the login path so as to respect the logout URL's?  Currently I have had to set all Logout URL's to the same destination and then disambiguate there and forward appropriately (the logic of which could be an issue in the future).

Appreciate any enlightenment. 

Dave 

[Fergus-Wood]

We also have the same scenario, where we have multiple SAML SSO providers set up in our Canvas instance (one for each external client IdP) and we need to log users out and return them to their correct, corresponding SSO login. I am interested to know if there is a way to influence the logout URL based on where the user arrived from. 

[Fergus-Wood]

We have a similar issue, however we ideally need to append a redirectURI (or goto URL) onto the SAML logout so that a user can be directed to the correct login page after successful logout from the IdP.