When logging users out with the /oidc/logout endpoint, Auth0 displays a consent prompt because the OpenID Connect (OIDC) standard requires user permission before logging out of the Identity Provider (IdP). Disabling the prompt at the tenant level or avoiding the conditions that trigger the prompt resolves this issue.

• Auth0
• OpenID Connect (OIDC) Logout
• Consent Prompt

This behavior adheres to the OpenID Connect (OIDC) standard, which specifies that a user must provide permission before logging out of the Identity Provider (IdP).

How is the logout consent prompt disabled at the tenant level?

Clear the Relying Party (RP) initiated logout end-user confirmation setting in the Auth0 Dashboard to disable the prompt at the tenant level.

1. Go to Settings > Advanced in the Auth0 Dashboard.
2. Select the Login and Logout tab.
3. Clear the RP-Initiated Logout End-User Confirmation checkbox.

Avoid Triggering the Conditions for the Consent Prompt

The prompt is enforced when any of the following conditions are met:

• Neither the id_token_hint nor the logout_hint parameters are provided.
• The ID token's sid claim does not correspond to the browser session in the request.
• The value of the logout_hint parameter does not match the current session data.

For more details, refer to the documentation on the Logout Consent Prompt.

Related References

• OIDC Logout
• Logout Consent Prompt