(Optional) Enabling Single Logout

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

You can enable single logout (SLO) for your SAML application. This requires you to manually configure a SAML 2.0 application for the Jamf Pro server. SLO ensures Jamf Pro administrators who may complete the enrollment process for other users can end all sessions started with Jamf Pro and the IdP.

  1. In Okta, go to to the manually-created application for the Jamf Pro server.
  2. Navigate to General > SAML Settings and click Edit.
  3. For Signature Certificate, upload the same certificate that was used in Jamf Pro.

    If you do not already have a certificate, you need to generate one in Jamf Pro. Navigate to Settings > Single Sign-On. Select Okta from the Identity Provider menu and select the Security box. From the resulting menu, choose Generate Certificate and download it.

  4. In Advanced Settings, select the Allow application to initiate Single Logout checkbox.
    1. For Single Logout URL, use the singlelogout parameter found in the Jamf Pro metadata.
      Example:instancename.jamfcloud.com/saml/SingleLogout
    2. For SP Issuer, use the Jamf Pro Entity ID.
      Example:instancename.jamfcloud.com/saml/metadata
  5. Save the configuration.

SLO is now enabled for your SAML application.