Begin by navigating to your Keycloak IDP configuration and select Single Logout from the navigation menu. As of Kantega SSO 3.5.0, The logout URL should be populated, and you can simply enable Single Logout and click "Save":
...
Read the following if the SAML provider logout URL for Keycloak isn't already configured:
| Expand | ||
|---|---|---|
| ||
If the Keycloak logout URL isn't specified already, it's |
...
likely because the configuration predates Kantega SSO 3.5.0, where this URL wasn't |
...
imported yet. You can either fill it manually |
...
or do a metadata refresh against Keycloak to obtain it. To refresh from metadata, use the indicated link in the nav menu: |
...
 The Keycloak metadata URL may not be on file. If it's missing, you can obtain it from Now go back to the Single Logout menu and if the logout URL is now populated, enable SLO and save. |
Log in to your Keycloak server and locate the Client/SP configuration for the Atlassian app:
...
The logout endpoint for the service provider is configured by expanding the "Fine Grain SAML Endpoint Configuration" heading. Paste the SP logout URL from a few screenshots back and save. Keycloak does not (to our knowledge) support service provider metadata import, so you will need to input the SP logout URL manually (i.e., the logout URL of the Atlassian app). This can be found under "URLs and cert for IdP setup," as shown in the below screenshot. Copy the URL and paste it into Keycloak:
...