In Portal for ArcGIS, when using a Security Assertion Markup Language (SAML) based authentication (enterprise logins), initiating a logout from the Active Directory Federation Services (ADFS) identity provider does not log the user out of the portal.

Workaround

If logouts are initiated by the identity provider, the following workaround can be used:

1. In the Home app, export the service provider metadata file by navigating to Organization > Edit Settings > Security. Click Get Service Provider.
2. Save the service provider metadata file to a local location and edit it using a text or XML editor.
3. Locate the XML element "md:SingleLogoutService" and update the value of the "Location" attribute to https://[Fully qualified domain name]/[web context]/sharing/rest/oauth2/signout.
4. Update the relying party configuration in the identity provider with this service provider metadata.

Steps to Reproduce