It is the one standard that can end a session your app already issued, it has been final since 2022, and almost nobody implements it. Here is the whole mechanism, the validation your endpoint owes, and the two limitations the spec admits to itself.
How to implement OIDC back-channel logout, and why almost nobody has
calendar_today
September 8, 2026
domain
workos