Configuring SLO Request URL in front channel logout for tenant environment. [IS 5.9.0 - 5.10.0]

[SiluniPathirana]

In the documentation [1] following mentioned SLO request URL is incorrect.

SLO Request URL ; "http:/localhost:8080/identity/saml/slo"

It should be corrected as

SLO Request URL ; "http:/<IS_HOSTNAME>:<IS_PORT>/identity/saml/slo"

ex:

SLO Request URL ; "http:/localhost:9443/identity/saml/slo"

And we need to include the configuration for multi tenant environment as well. For tenants the SLO request URL should be as follows

"http://apim.com:9443/t/<tenant_domain>/identity/saml/slo"

And in the <IS_HOME>/repository/conf/deployment.toml the configs should be configured as follows

[[resource.access_control]]
context="(.*)/identity/saml/slo(.*)"
secure="false"
http_method="all"

[1] https://is.docs.wso2.com/en/latest/learn/handling-saml-single-logout-requests-from-federated-identity-providers/