Third-party apps that support Universal Logout

These third-party apps support Universal Logout. Each app has different implementation, permission requirements, and Universal Logout behaviors. Apps identified as Secure Identity Integrations bring advanced security to some of the biggest SaaS apps.

Full Universal Logout support

App name
Notes
Secure Identity Integration
Box See Create jobs to terminate users session. ●
Cerby See Cerby Help Center.
Dropbox for Business See /devices/list_member_devices and /devices/revoke_device_session_batch. ●
Google Workspace and Google Cloud Platform

These apps share an identity stack. If a user has access to both of these apps, they're signed out of both apps when Universal Logout is triggered for Google Workspace.

See Method: users.signOut.

 ●
PagerDuty See Delete a user's session.
Salesforce See AuthSession. ●
Slack

You can only enable Universal Logout for Slack Enterprise's Slack account.

See admin.users.session.reset.

 ●
Surf This product suspends a user when Universal Logout is triggered. To unsuspend a user, restore the session through the Surf console or API. Contact Surf for support.
Zendesk See Delete Session. ●
Zoom See Revoke a user's SSO token. ●

Partial Universal Logout support

App name
Notes
Secure Identity Integration

Microsoft:

  • Azure Portal
  • Defender for Cloud Apps
  • Defender for Endpoint
  • Defender for Office 365
  • Dynamics 365
  • Microsoft 365
  • Power BI
  • Power Platform and Visual Studio
  • Sentinel
  • SQL Server Management Studio

These apps share an identity stack and only provide a partial Universal Logout. Universal Logout only revokes their refresh tokens. User sessions aren't terminated until the user's existing access tokens expire or the user signs out. The token expiration timeout is different for each app.

See Revoke user access in Microsoft Entra ID.

●

Related topics

Universal Logout supported apps

Universal Logout revocations