# Unable to logout from kibana dashboard

**URL:** <https://forum.opensearch.org/t/unable-to-logout-from-kibana-dashboard/5380>\
**Category:** Open Source Elasticsearch and Kibana\
**Created:** [March 19, 2021, 9:00am UTC](https://forum.opensearch.org/t/unable-to-logout-from-kibana-dashboard/5380 "2021-03-19T09:00:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![skbhardwaj](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/skbhardwaj/32/1231_2.png) [@skbhardwaj](https://forum.opensearch.org/u/skbhardwaj)\
**Post date:** [March 19, 2021, 9:00am UTC](https://forum.opensearch.org/t/unable-to-logout-from-kibana-dashboard/5380/1 "2021-03-19T09:00:30Z")

</div>

Hello,

In one of our applications, we are trying to open the kibana dashboard (v7.10.0), in another tab. The kibana app is loading properly. However, when we are trying to logout from the Kibana, the request (/kibanaui/auth/logout) is returning as 404. And we could see an error in browser console.

I believe, because of the error 404, the response doesn’t have desired headers which are required to remove cookies & stuff. Therefore the session is still retained.

Could you please help me in resolving the issue ?

Here is the screenshot of the steps:  
 ![kibana-logout-error](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/5/539d7f101321875bb930415efa53bae56732d109.gif)

Thanks & regards,  
Shri

---

<div class="post-metadata">

**Author:** ![oscark](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/oscark/32/866_2.png) [@oscark](https://forum.opensearch.org/u/oscark)\
**Post date:** [March 19, 2021, 9:48am UTC](https://forum.opensearch.org/t/unable-to-logout-from-kibana-dashboard/5380/2 "2021-03-19T09:48:21Z")

</div>

I’m guessing that you are using OIDC or SAML, are you? What methods are you using for authentication? If you are using federated login/SSO methods, they usually works poorly when it comes to log out. AFAIK both SAML and OIDC does not have strictly defined method for how logouts should works.

For example OIDC have a `opendistro_security.openid.logout_url` variable that can be set but it depends on your SSO provider how the logout works. I have not used SAML in ODFES but there is a `sp.forceAuthn` that might be useful.

---

<div class="post-metadata">

**Author:** ![skbhardwaj](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/skbhardwaj/32/1231_2.png) [@skbhardwaj](https://forum.opensearch.org/u/skbhardwaj)\
**Post date:** [March 19, 2021, 12:21pm UTC](https://forum.opensearch.org/t/unable-to-logout-from-kibana-dashboard/5380/3 "2021-03-19T12:21:12Z")

</div>

Hello @oscark,

We are using jwt token for authentication.

`opendistro_security.auth.type: "jwt"`  
`opendistro_security.jwt.header: "access-token"`

But not sure if that would create such issue.

---

<div class="post-metadata">

**Author:** ![skbhardwaj](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/skbhardwaj/32/1231_2.png) [@skbhardwaj](https://forum.opensearch.org/u/skbhardwaj)\
**Post date:** [March 23, 2021, 7:48am UTC](https://forum.opensearch.org/t/unable-to-logout-from-kibana-dashboard/5380/4 "2021-03-23T07:48:10Z")

</div>

ref - [https://github.com/opendistro-for-elasticsearch/security-kibana-plugin/issues/687](https://github.com/opendistro-for-elasticsearch/security-kibana-plugin/issues/687)