index.md

description	topics	contentType	useCase
Understand how logout works with Auth0.	logout	index	manage-logout

Logout

You can log a user out of the Auth0 session and (optionally) from the identity provider (IdP) session. When you're implementing the logout functionality, there are typically three session layers you need to consider:

1. Application Session Layer: The first layer is the session inside your application. Though your application uses Auth0 to authenticate users, you'll still need to track that the user has logged in to your application. In a regular web application, you achieve this by storing information inside a cookie. Log users out of your applications by clearing their session. You should handle the application session in your application.

2. Auth0 Session Layer: Auth0 also maintains a session for the user and stores their information inside a cookie. The next time a user is redirected to the Auth0 Lock screen, the user's information will be remembered. Log users out of Auth0 by clearing the Single Sign-on (SSO) cookie.

3. Identity Provider Session Layer: The last session layer is the identity provider layer (for example, Facebook or Google). When users attempt to sign in with any of these providers and they are already signed into the provider, they will not be prompted again to sign in. The users may be asked to give permission to share their information with Auth0 and, in turn, your application. It is not necessary to log the users out of this session layer, but you can force the logout. (For more information, see Log Users Out of Identity Providers and Log Users Out of SAML Identity Providers.)

Quickstarts for logout functionality

For guidance on how to implement logout functionality in your specific type of application and sample code, refer to our Quickstarts for the following types of applications:

Native/Mobile Apps

• Android
• Chrome Extension
• Cordova
• Ionic 3+
• iOS Objective-C
• iOS Swift

Single-Page Apps

• Angular 2+
• JavaScript
• React
• Vue

Web Apps

• ASP.NET (OWIN)
• ASP.NET Core
• Java
• Java Spring MVC
• Java Spring Security
• NancyFX
• Node.js
• PHP (Laravel)
• PHP (Symfony)
• Python
• Ruby on Rails

Redirect users after logout

After users log out, you can redirect users to a specific URL. You need to register the redirect URL in your tenant or application settings. Auth0 only redirects to whitelisted URLs after logout. If you need different redirects for each application, you can whitelist the URLs in your application settings.

Keep reading

• Log Users Out of Auth0
• Log Users Out of Applications
• Log Users Out of Identity Providers
• Log Users Out of SAML Identity Providers
• Log Users Out of Auth0 as the SAML Identity Provider