Single Sign Out for Azure AD SSO for WordPress

When WordPress SSO is enabled, authentication occurs through Microsoft Entra ID (Azure AD). Without Single Sign Out, logging out of WordPress may leave the Microsoft session active, creating security risks and an inconsistent experience.

The All-in-One Microsoft Office 365 Apps Plugin includes a Single Sign Out feature that synchronizes logout actions. When enabled, signing out of WordPress also ends the Microsoft SSO session.

Both sessions end simultaneously, ensuring secure access control and a consistent, reliable user experience.

How Microsoft Entra ID Single Sign Out Works in WordPress

When a user logs out of WordPress, the plugin ends the local session and sends a logout request to Microsoft Entra ID. This clears the active Microsoft authentication session in the browser, ensuring that the next login attempt requires credentials instead of granting automatic access.

For example, a consulting company may provide a WordPress portal for project collaboration. If a consultant signs in with Microsoft Entra ID SSO on a shared computer, logging out of WordPress also closes the Microsoft session. This prevents another colleague from accessing the account simply because the Microsoft session was still active.

Key Benefits

Enabling Single Sign Out improves both usability and security by aligning logout behavior between WordPress and Microsoft Entra ID.

• Logging out of WordPress simultaneously closes the Microsoft session.
• Prevents automatic re-entry on shared or public devices.
• Provides customers and partners with a predictable and consistent logout process.
• Strengthens security by ensuring no lingering sessions remain after logout.
• Supports enterprise compliance standards for session termination.

Requirements

To configure Single Logout in WordPress with Microsoft Entra ID, ensure the following are in place:

• All-in-One Microsoft Office 365 Apps Plugin installed and configured for Microsoft SSO.
• A registered App in Microsoft Entra ID with a Logout Redirect URI defined.
• HTTPS is enabled on the WordPress site for secure logout requests.
• Users authenticating through WordPress SSO with Microsoft Entra ID for the feature to apply.