Auth0 Logout API

The Logout API from Auth0 — 3 operation(s) for logout.

Business capability
Identity & Access Management BC-620.20

Operations 3

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /v2/logout Log a user out and redirect with returnTo · Auth0 Logout a User #
Ask an LLM
“How do I log a user out of their session and send them back to my homepage?”
“Can logout also sign the user out of the upstream identity provider?”
Tell an agent
Log the user out and redirect to {returnTo}.
Log out from application {client_id}, return to {returnTo}, and set federated to {federated}.
GET /oidc/logout Log a user out via OIDC RP-initiated logout · Auth0 Logout a User #
Ask an LLM
“What is the OpenID Connect compliant way to end a user's session?”
“Can I pass an ID token hint and post-logout redirect URI when signing out?”
Tell an agent
Do an OIDC logout with ID token hint {id_token_hint} and redirect to {post_logout_redirect_uri}.
End the session via OIDC logout for client {client_id}, keeping state {state}.
POST /samlp/{CLIENT_ID}/logout Log a user out of a SAML identity provider app · Auth0 Logout a User #
Ask an LLM
“How do I handle single logout when Auth0 acts as the SAML identity provider?”
“Which endpoint performs SAML logout for a SAML2 Web App addon application?”
Tell an agent
Run SAML logout for application {CLIENT_ID}.
Log the user out of the SAML IdP session for client {CLIENT_ID}.

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/auth0:auth0-logout-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

auth0-logout-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: Auth0 Authentication Logout API
  description: Auth0 Authentication API. Endpoints for authentication and authorization using OpenID Connect, OAuth 2.0, SAML, WS-Federation, and Passwordless flows.
  version: 1.0.0
servers:
- url: '{auth0_domain}'
  description: The Authentication API is served over HTTPS.
  variables:
    auth0_domain:
      description: Auth0 domain
      default: https://demo.us.auth0.com
tags:
- name: Logout
paths:
  /v2/logout:
    get:
      operationId: logout
      tags:
      - Logout
      summary: Auth0 Logout a User
      description: Use this endpoint to logout a user. If you want to navigate the user to a specific URL after the logout, set that URL at the returnTo parameter. The URL should be included in any the appropriate Allowed Logout URLs list.
      parameters:
      - name: returnTo
        in: query
        required: false
        description: URL to redirect the user after the logout.
        schema:
          type: string
      - name: client_id
        in: query
        required: false
        description: The client_id of your application.
        schema:
          type: string
      - name: federated
        in: query
        required: false
        description: Add this query string parameter to the logout URL, to log the user out of their identity provider, as well.
        schema:
          type: string
      responses:
        '302':
          description: Redirect to the returnTo URL or to the first Allowed Logout URLs set in the Dashboard.
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '405':
          $ref: '#/components/responses/MethodNotAllowed'
        '429':
          $ref: '#/components/responses/TooManyRequests'
        '500':
          $ref: '#/components/responses/InternalServerError'
        '501':
          $ref: '#/components/responses/NotImplemented'
        '503':
          $ref: '#/components/responses/ServiceUnavailable'
  /oidc/logout:
    get:
      operationId: oidc_logout
      tags:
      - Logout
      summary: Auth0 Logout a User
      description: Use this endpoint to logout a user. If you want to navigate the user to a specific URL after the logout, set that URL at the post_logout_redirect_uri parameter. The URL should be included in the appropriate Allowed Logout URLs list.
      parameters:
      - name: id_token_hint
        in: query
        required: false
        description: Previously issued ID Token for the user. This is used to indicate which user to log out.
        schema:
          type: string
      - name: logout_hint
        in: query
        required: false
        description: Optional sid (session ID) value to indicate which user to log out. Should be provided when id_token_hint is not available.
        schema:
          type: string
      - name: post_logout_redirect_uri
        in: query
        required: false
        description: URL to redirect the user after the logout.
        schema:
          type: string
      - name: client_id
        in: query
        required: false
        description: The client_id of your application.
        schema:
          type: string
      - name: federated
        in: query
        required: false
        description: Add this query string parameter to log the user out of their identity provider.
        schema:
          type: string
      - name: state
        in: query
        required: false
        description: An opaque value the applications adds to the initial request that the authorization server includes when redirecting the back to the post_logout_redirect_uri.
        schema:
          type: string
      - name: ui_locales
        in: query
        required: false
        description: Space-delimited list of locales used to constrain the language list for the request. The first locale on the list must match the enabled locale in your tenant.
        schema:
          type: string
      responses:
        '302':
          description: Redirect to the post_logout_redirect_uri URL or to the first Allowed Logout URLs set in the Dashboard.
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '405':
          $ref: '#/components/responses/MethodNotAllowed'
        '429':
          $ref: '#/components/responses/TooManyRequests'
        '500':
          $ref: '#/components/responses/InternalServerError'
        '501':
          $ref: '#/components/responses/NotImplemented'
        '503':
          $ref: '#/components/responses/ServiceUnavailable'
  /samlp/{CLIENT_ID}/logout:
    post:
      operationId: saml_logout
      tags:
      - Logout
      summary: Auth0 Logout a User
      description: Use this endpoint to log out a user from an Auth0 tenant configured as a SAML identity provider (IdP). Logout behavior is determined by the configuration of the SAML2 Web App addon for the application on the Auth0 tenant acting as the SAML IdP.
      parameters:
      - name: CLIENT_ID
        in: path
        required: true
        description: Client ID of your application configured with the SAML2 Web App addon.
        schema:
          type: string
      requestBody:
        required: true
        content:
          application/xml:
            schema:
              type: string
              description: SAML LogoutRequest message.
      responses:
        '200':
          description: Logout successful.
        '400':
          $ref: '#/components/responses/BadRequest'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '403':
          $ref: '#/components/responses/Forbidden'
        '404':
          $ref: '#/components/responses/NotFound'
        '405':
          $ref: '#/components/responses/MethodNotAllowed'
        '429':
          $ref: '#/components/responses/TooManyRequests'
        '500':
          $ref: '#/components/responses/InternalServerError'
        '501':
          $ref: '#/components/responses/NotImplemented'
        '503':
          $ref: '#/components/responses/ServiceUnavailable'
components:
  responses:
    MethodNotAllowed:
      description: Method Not Allowed
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
              error_description:
                type: string
    InternalServerError:
      description: Internal Server Error
    Forbidden:
      description: Forbidden
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
              error_description:
                type: string
    ServiceUnavailable:
      description: Service Unavailable
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
              error_description:
                type: string
    TooManyRequests:
      description: Too Many Requests
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
              error_description:
                type: string
    NotImplemented:
      description: Not Implemented
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
              error_description:
                type: string
    BadRequest:
      description: Bad Request
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
              error_description:
                type: string
    Unauthorized:
      description: Unauthorized
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
              error_description:
                type: string
    NotFound:
      description: Not Found
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
              error_description:
                type: string