How to logout from SMA with SAML enabled using OKTA (4352923)

When trying to logout from the KACE Systems Management Appliance with SAML enabled using OKTA, results in a new login to KACE SMA.

1. On KACE SMA:
   • Browse to Settings | Control Panel | SAML Settings
   • Scroll down to "Local Service Provider (SP) Settings" and click on "View Metadata"
   • Copy the "SP Entity Identifier (uri)" and "SP SLO Endpoint (URL)"

   

2. On any Browser navigate to the "SP SLO Endpoint (url)"
3. Copy the certificate found between "ds:X509Certificate"  and "/ds:X509Certificate"
4. Paste this certificate on a notepad between "-----BEGIN CERTIFICATE-----" and "-----END CERTIFICATE-----"
5. Save this file with .cer extension
6. On OKTA:
   • Open the Application used to login to the KACE SMA.
   • Edit the SAML Settings
   • Click on Show Advanced Settings 

   

   • Check the “Allow application to initiate Single Logout” option
   • On Single Logout URL field paste the "SP SLO Endpoint (url)"
   • On SP Issuer field paste the "SP Entity Identifier (uri)"
   • On the Signature Certificate browse to the .cer file created on step 4
   • Click on Upload Certificate and click on Next, then Finish