NameID mapping and Single Logout (#47288) (#47563)

Clarify in the documentation that for SAML Single Logout to be functional, the Identity Provider needs to release a NameID.
elastic · Oct 7, 2019 · 4c8f004 · 4c8f004
1 parent 8c88d41
commit 4c8f004
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/x-pack/docs/en/security/authentication/saml-guide.asciidoc b/x-pack/docs/en/security/authentication/saml-guide.asciidoc
@@ -394,6 +394,7 @@ services it offers.
 By default the Elastic Stack will support SAML SLO if the following are true:
 
 - Your IdP metadata specifies that the IdP offers a SLO service
+- Your IdP releases a NameID in the subject of the SAML assertion that it issues for your users
 - You configure `sp.logout`
 - The setting `idp.use_single_logout` is not `false`