...
https://{damurl}/digizuitecore/loginservice/signin-oidc
SSO-initiated logout
When setting up the OpenID Connect SSO provider in MM, it is possible to tick enable the option Verify refresh tokens on access key refresh.
...
If this option is enabled, a request will be sent to the SSO provider when the access key of user needs to be refreshed, checking if the user is still logged in. Enabling the Verify refresh tokens on access key refresh option therefore allows the SSO provider to initiate a user to be logged out or having all access rights revoked.
Since a network request has to made to the SSO provider when refreshing an access key, refreshing an access key can take a bit longer.