Log out of Leap without being prompted to log out of Microsoft.
When staff log out of Leap at the end of their shift, Microsoft prompts them to sign out of their Microsoft account. I think it confuses staff, they click on the prompt and then they get logged out of their Microsoft account. They then have to log back in and due to MFA need to get a code to log back in. This isn't ideal.
Customer support said currently this behavior is how Leap with OAuth/SSO works. Leap uses the identity provider to control the login and logout when setup with OAuth/SSO. Can you place an enhancement request to see about adding the functionality to Leap to allow it to logout without logging out of the identity provider?
It would be great if this could be modified in a future release.
Pam Wills
shared this idea
-
Carl Ratz
commented
We have SSO, and I had need to log out of Leap as me and log in as a test user. I found that I couldn't do it like I could using the Polaris client.
Having the ability to sign in to Leap as a different user without having to log out of the workstation would be nice to be able to do.
If I could also ask, the ability to switch branches without logging out and in would be a good thing to have. -
AdminWes Osborn
(Admin, Innovative)
commented
Not forcing a log out of the identity provider is huge. Especially for organizations where the SSO is used to sign people in/out of the time keeping software is also SSO. So they sign out of leap, which signs them out of SSO, then they have to log back into SSO just to punch out for the day.
The option should be to sign out of Leap ONLY, just like non-SSOs sign out of Leap only.
-
Amy Mihelich
commented
Seconding Lynn's comment - we're also a consortium and we have libraries on multiple different networks with multiple IT departments. We'll have staff who have one MFA account for their city network and another for their library network, so getting logged in to both is often a complicated dance requiring things to happen in the right sequence.
-
Lynn Reynish
commented
Agreed! We have SSO enabled for a number of products and none of them prompt for a Microsoft log out. That's unnecessary and we wouldn't want this either and would dearly love to use SSO (we're in a complex consortium).