# Single signout using Front Channel with auth0
**URL:** https://discuss.pomerium.com/t/single-signout-using-front-channel-with-auth0/306
**Category:** Support
**Tags:** idp
**Created:** [September 13, 2023, 3:43am UTC](https://discuss.pomerium.com/t/single-signout-using-front-channel-with-auth0/306 "2023-09-13T03:43:47Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@Dennis](https://discuss.pomerium.com/u/Dennis)
#### Post date: [September 13, 2023, 3:43am UTC](https://discuss.pomerium.com/t/single-signout-using-front-channel-with-auth0/306/1 "2023-09-13T03:43:47Z")
## What happened?
I used auth0 as the IdP with simple flow like this :
client → pomerium → auth0 (IdP)
When i tried to do signout in the `https://external-url/.pomerium/sign_out`
It does not sign out from auth0.
Does auth0 support front-channel logout or this is not supported? Because i only see back-channel logout in [auth0 docs](https://auth0.com/docs/authenticate/login/logout/back-channel-logout). And i don’t see back channel logout in pomerium docs so it is quite confusing.
Is there another workaround ? I want to achieve single signout so auth0 will be logged out as well when we logged out from pomerium.
## What did you expect to happen?
The auth0 will be logged out as well
## What’s your environment like?
- Pomerium version (retrieve with `pomerium --version`):
{“level”:“info”,“config\_file\_source”:“/pomerium/config.yaml”,“bootstrap”:true,“envoy\_version”:“1.25.5+b1095c058415dfb2261e695a0f144311a7dc346b6eb47ecbb0a01b7de2c7299f”,“version”:“0.23.0-1693234251+5a4acc5c”,“time”:“2023-09-12T15:18:28Z”,“message”:“cmd/pomerium”}
- Server Operating System/Architecture/Cloud:
## What’s your config.yaml?
config.yaml
```auto
authenticate_service_url: https://auth.dev
routes:
- from: 'https://test.dev'
to: 'https://httpbin.org/get'
allow_any_authenticated_user: true
cors_allow_preflight: true
set_request_headers:
x-pomerium-idp-id-token: ${pomerium.id_token}
x-pomerium-idp-access-token: ${pomerium.access_token}
x-pomerium-client-cert-fingerprint: ${pomerium.client_cert_fingerprint}
pass_identity_headers: true
cookie_secret: xxxxx
# Relative file location for a single cert
certificate_file: '/etc/data/cert/fullchain.cer'
certificate_key_file: '/etc/data/cert/*.pom.dev.key'
signing_key: XXXXXXX
frontchannel_logout_uri: 'https://test.dev'
signout_redirect_url: 'https://google.com'
idp_provider: 'auth0'
idp_provider_url: 'https://xxx.auth0.com'
idp_client_id: 'abc123' # from the web application
idp_client_secret: 'secret123' # from the web application
skip_xff_append: true
pomerium_debug: true
set_authorization_header: pass_through
```
## What did you see in the logs?
nothing in particular
---
### Author:  [@calebdoxsey](https://discuss.pomerium.com/u/calebdoxsey)
#### Post date: [September 13, 2023, 5:22pm UTC](https://discuss.pomerium.com/t/single-signout-using-front-channel-with-auth0/306/2 "2023-09-13T17:22:51Z")
There is code to do a frontchannel logout when a user logs out. It should redirect to the IdP after killing the Pomerium session. It’s possible this code is not working with auth0. I will create an issue.
---
### Author:  [@calebdoxsey](https://discuss.pomerium.com/u/calebdoxsey)
#### Post date: [September 13, 2023, 5:24pm UTC](https://discuss.pomerium.com/t/single-signout-using-front-channel-with-auth0/306/3 "2023-09-13T17:24:47Z")
Looks like its a custom flow: [Authentication API Explorer](https://auth0.com/docs/api/authentication#logout)
---
### Author:  [@calebdoxsey](https://discuss.pomerium.com/u/calebdoxsey)
#### Post date: [September 13, 2023, 5:28pm UTC](https://discuss.pomerium.com/t/single-signout-using-front-channel-with-auth0/306/4 "2023-09-13T17:28:17Z")
>
>
> \## What happened?
>
> I used auth0 as the IdP with simple flow like this: client …→ pomerium → auth0 (IdP)
>
> When i tried to do signout in the https://external-url/.pomerium/sign\_out
> It does not sign out from auth0.
>
> Does auth0 support front-channel logout or this is not supported? Because i only see back-channel logout in \[auth0 docs 1\](https://auth0.com/docs/authenticate/login/logout/back-channel-logout). And i don’t see back channel logout in pomerium docs so it is quite confusing.
>
> Is there another workaround ? I want to achieve single signout so auth0 will be logged out as well when we logged out from pomerium.
>
> \## What did you expect to happen?
> The auth0 will be logged out as well
>
>
>
> \## How'd it happen?
>
>
>
> \## What's your environment like?
>
> \- Pomerium version (retrieve with pomerium --version):
> \- \`{“level”:“info”,“config\_file\_source”:“/pomerium/config.yaml”,“bootstrap”:true,“envoy\_version”:“1.25.5+b1095c058415dfb2261e695a0f144311a7dc346b6eb47ecbb0a01b7de2c7299f”,“version”:“0.23.0-1693234251+5a4acc5c”,“time”:“2023-09-12T15:18:28Z”,“message”:“cmd/pomerium”}\`
>
>
> \## What's your config.yaml?
>
> \`\`\`config.yaml
> authenticate\_service\_url: https://auth.dev
> routes:
> - from: 'https://test.dev'
> to: 'https://httpbin.org/get'
> allow\_any\_authenticated\_user: true
> cors\_allow\_preflight: true
> set\_request\_headers:
> x-pomerium-idp-id-token: ${pomerium.id\_token}
> x-pomerium-idp-access-token: ${pomerium.access\_token}
> x-pomerium-client-cert-fingerprint: ${pomerium.client\_cert\_fingerprint}
> pass\_identity\_headers: true
> cookie\_secret: xxxxx
>
> \# Relative file location for a single cert
> certificate\_file: '/etc/data/cert/fullchain.cer'
> certificate\_key\_file: '/etc/data/cert/\*.pom.dev.key'
>
> signing\_key: XXXXXXX
>
> frontchannel\_logout\_uri: 'https://test.dev'
> signout\_redirect\_url: 'https://google.com'
>
> idp\_provider: 'auth0'
> idp\_provider\_url: 'https://xxx.auth0.com'
> idp\_client\_id: 'abc123' # from the web application
> idp\_client\_secret: 'secret123' # from the web application
>
> skip\_xff\_append: true
> pomerium\_debug: true
> set\_authorization\_header: pass\_through
> \`\`\`