Salesforce Certified Administrator Exam: Universal Container's Salesforce Admin Logout Scenario

Understanding Single Logout for Salesforce Admin User

Question

Universal Container's Salesforce Admin user has Salesforce as the identity provider for one of the connected apps.

What will happen when the Salesforce Admin user logs out of Salesforce with a single logout?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

Correct Answer: B

Using single logout, users will be automatically logout from all the connected apps when he logs out of the Salesforce.

This single logout feature can increase security and usability.

So, once a user logs out from a single application, all other application will automatically log the user out.

Option A is incorrect because users can't stay logged in to the connected apps.

With the single logout, users are logged out of all connected apps.

Option C is incorrect because Salesforce has both single sign in and single logout.

Option D is incorrect because single logout is related to the connected apps.

Reference:

When a user logs in to Salesforce with single sign-on (SSO) enabled, Salesforce acts as the identity provider (IdP) and generates an authentication token that is passed to the connected app for validation.

When the user logs out of Salesforce, a single logout (SLO) request is sent to all connected apps using the SAML (Security Assertion Markup Language) protocol. The SLO request tells the connected apps to invalidate the user's session and log them out.

Therefore, the correct answer to the question is B: The user will be automatically logged out of the connected apps when the Salesforce Admin user logs out of Salesforce with a single logout. This is because the SLO request will be sent to all connected apps, telling them to invalidate the user's session and log them out.

Option A is incorrect because the user will not stay logged in to the connected apps after logging out of Salesforce with a single logout.

Option C is incorrect because Salesforce does have a single logout option.

Option D is also incorrect because SLO does interfere with connected apps by logging the user out of those apps.