This behavior is expected on Mendix Cloud when using SAML/SSO. Calling /sso/logout from a nanoflow does not always trigger a full browser logout, which is why the user may be redirected back to index.html. A reliable workaround is to perform a hard redirect to <app-url>/SSO/logout.
Kindly check the thread, which explains a practical workaround implementation (e.g., using a URL redirect / dedicated logout button) that should help in your case.
hi,
This is expected behavior on Mendix Cloud and not a permissions issue.
When you trigger /<app-url>/sso/logout via a nanoflow redirect, the browser does not fully clear the session on Mendix Cloud due to SSO + SameSite cookie handling. As a result, the platform redirects you back to index.html instead of logging out completely.
That’s why:
Use one of these supported approaches:
/sso/logoutMendix Cloud requires the logout request to be handled as a full browser navigation, not a client-side redirect, so cookies are cleared correctly.