{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":40659,"path":"platform-security/authentication/t_EnableSignedLogoutRequests.md","title":"\\(Optional\\) Enable signed logout requests","bundle":null,"doc_type":null,"release":"australia","body":"\n# \\(Optional\\) Enable signed logout requests\n\nSome IdPs require the Service Provider to sign logout requests with a certificate.\n\n## Before you begin\n\nRole required: sso\\_config\\_admin, business\\_rule\\_admin, script\\_include\\_admin\n\n## About this task\n\nIf your IdP requires signed logout requests, use the IdP's metdata to set the following system properties.\n\n## Procedure\n\n1.  In the **Advanced** tab, from the property Sign LogoutRequest. Set this property to true if the Identity Provider's SingleLogoutRequest service requires signed LogoutRequest, select **Yes** to specify that your IdP requires a signed logout request, or select **No** to use unsigned logout requests.\n\n2.  If you selected **Yes** to Sign LogoutRequest, then in The protocol binding for the Identity Provider's SingleLogoutRequest service. \\(Value can be either \"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect\" or \"urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST\".\\) property, enter the one of the supported values listed in `Binding` attribute from the`SingleLogoutService` element.\n\n    By default, the integration uses an HTTP-Redirect binding.\n\n3.  Click **Update**.\n\n4.  [Install a Service Provider \\(SP\\) key store](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/authentication/t_InstallASPKeystoreSigningSAMLReqs.md).\n\n\n"}}