Changes required in the Target Systems to facilitate SSO/SLO Integration, User Session Management and Application Logout Management.

Single Sign-On (SSO) allows users to authenticate once through the Identity Provider (IDP) and access multiple service providers (SPs) without re-authenticating. The Bank leverages both SAML and OIDC protocols to facilitate SSO for its applications.

The Bank requires that each application supports individual session logout in addition to a global logout across all applications. Upon logout, users must be redirected to a Bank-provided ISVA URL (logout notification page), which will also track session terminations.

I. Each SP should terminate the session for its own application without affecting sessions for other applications.

II. The logout process should not trigger a global logout across all service providers.

III. After logging out from an application, users should be redirected to a Bank-provided logout notification page hosted on ISVA.

IV. The SP must implement the redirect to the provided ISVA URL after successfully terminating the session.

V. The logout process initiated from a target application should not trigger a global logout across all service providers