Logout and timeout redirect to SAML error (SSO on Entra)

[mud_mixer]

I've been setting up apps for SSO with Entra, and I followed the guides both on Microsoft and Meraki for Meraki's. It works except for one problem. 

On logout or timeout, I get this SAML error below. I looked through this board and saw someone put a different logout URL that was a bit more graceful, but ultimately logged me out of Entra and didn't let me log back in from that tab. I started cases with both Meraki and Microsoft, and after trying some things, they told me to start a case with the other company. 

My goal is to make it so upon timeout/logout, I'm simply forwarded back to the Meraki screen with the button 'Log in with SSO' which I can get to right now through our vanity URL. 

[PhilipDAth]

Personally, when I setup clients I typically don't fill out the sign-out URL (I leave it blank).

The issue is if you are signed into (say) 5 Entra ID authenticated apps (say Admin centre, Webmail, Salesforce, etc), and you trigger a signout (such as from the Meraki Dashboard, Salesforce, etc) - it signs you out of EVERY app that you are logged into.

Most people don't want this behaviour.  If you remove the sign out URL, and you sign out of one app (such as the Meraki Dashboard) you get signed out of just that one app (it destroys the session token).

[mud_mixer · Accepted solution]

Putting the Vanity URL in the logout instead of the URL the guide said did the trick. Now, on timeout or logout it just goes back to 'log into sso' where I can quickly get a session going again. Thanks

[rhbirkelund]

When you say vanity url, do you mean simply putting e.g dashboard.meraki.com as the logout url?