Hi, The RP is not able to terminate the session on the OP. /opt/tomcat/logs# tail -f wrapper.log ``` INFO | jvm 1 | 2016/10/17 02:17:23 | 2016-10-17 02:17:23,683 ERROR [xdi.oxauth.session.ws.rs.EndSessionRestWebServiceImpl] session_state is not passed to endpoint (as cookie or manually). Therefore unable to match clients for session_state.Http based html will contain no iframes. ``` This error is reported when the RP sends a request according to https://www.gluu.org/docs/api/oic-end-session/ However it uses the uri from discovery: oid.provider.config.raw["end_session_endpoint"] and ``` my_params = {id_token_hint: oid.id_token, post_logout_redirect_uri: redir, state: 'something387', session_id: session[:session_id]} ``` which in my case is something like: ``` {:id_token_hint=> "eyJraWQiOiI1Mz<...>EyNEEhMDAwMSFBQzhCLjRERUIhMDAwMCExMkQ0LkRFQUYifQ.ja1P1MZAQU_HJw1QniTSeHd1QSfIfJTrSMzuqpXKb91UGfx_n8k1HIiUHUhD5c6KCboTtXevgV38hWCJDezb6pIpBdDYFr1y9UAQI-U<...>MW-RUx19sJe9UG48E4NxYvV-6xV4iRCbyRfaR<...>WPAQL7x65wB7BxpGBLJmdSe6bQ", :post_logout_redirect_uri=>"https://<RP-fqdn>/destroy_devise_session", :state=>"something387", :session_id=>"3f2f8b2ca10824be1ccf90c60098822e"} ``` It looks like the session_id gets lost. The error message comes from ``` https://github.com/GluuFederation/oxAuth/blob/master/Server/src/main/java/org/xdi/oxauth/session/ws/rs/EndSessionRestWebServiceImpl.java#L72 ``` Thanks Ernst Ubuntu 16.04.1 LTS Gluu Identity Appliance 2.4.4.sp1