OIDC logout flow in Qlik Sense Client Managed

[GianlucaFerri]

We configured an OIDC Virtual Proxy in Qlik Sense Client-Managed.

Login works (although we needed to block additional claim) but qlik doesn't call the logout flow in the OIDC provider.

We are connecting to an institutional provider that requires logout to be handled in order to allow the service usage.

It's not clear to us if this is not supported at all or we need to change configurations.

Also, are there workarounds for this?

thanks,

Gianluca

[peter89jean]

In Qlik Sense Client-Managed, OIDC logout is not automatically triggered just because OIDC login is configured; logout support depends on the authentication/virtual proxy configuration and the Qlik version. Check whether your version supports OIDC RP-Initiated Logout and whether the provider’s end_session_endpoint is exposed in its discovery metadata. If it is not supported, common workarounds are using a custom logout URL/redirect www greenskyonline com through the IdP, or configuring the IdP session timeout appropriately. Since your institutional provider requires a proper IdP logout, I’d recommend checking the exact Qlik Sense version and virtual proxy OIDC settings first.