title: PingFederate IIS Integration Kit logout SLO
body: <p>We've installed and configured IIS integration kit for ASPX web-site. SSO works fine, but cannot handle SLO process:
  1)  we've created "Exit" link: </p>
  
  <pre><code>https://[PingFederate]/idp/startSLO.ping?PartnerSpId=[partner]&amp;TARGET=[our_site].
  </code></pre>
  
  <p>2) On PingFederate server our agent has logout URL: </p>
  
  <pre><code>https://[our_site]/logout.aspx
  </code></pre>
  
  <p>3) logout.aspx</p>
  
  <pre><code>protected void Page_Load(object sender, EventArgs e)
  {
      FormsAuthentication.SignOut();
      Session.Abandon();
      String returnUrl = "https://&lt;PingFederate&gt;" + Request["resume"];
  
  
      SFunctions.fnInsSystemLogRSP(returnUrl);
  
      Response.Redirect(returnUrl);
  }
  </code></pre>
  
  <p>4) After clicking on "Exit" we get link in browser:</p>
  
  <pre><code>https://&lt;our_site&gt;/logout.aspx?resume=/sp/Yh9ls/resume/sp/SLO.ping&amp;opentoken=[token]
  </code></pre>
  
  <p>5) we get error in red box (coming from Ping Federate): </p>
  
  <pre><code>Error Single-Sign-On resumePath not whitelisted
  </code></pre>
  
  <p>6) There is also link from our server support </p>
  
  <pre><code>https://[Ping Federate]/ext/logout
  </code></pre>
  
  <p>And if I open this link in browser, it logs me out of PingFederate (if I go to SSO link, I will need to login again), but I can still access application.</p>
  
  <p>Any help appreciated! Might we need to use different procedure for SLO on IIS kit.</p>
  
  <p>Thanks!</p>