Upon more research, it does seem that in order to use that we have to first resolve a tenant and bootstrap a OneLoginBuilder instance. Is there a way to do that without extending a lot using built in package support? It also seems that we do still need to track the current tenant in that case as well unless I'm missing something it would be nice if the package could abstract majority of this from the application in terms of implementation.

It also seems that in order to perform a global SLO, that the nameId, sessionIndex, nameIdFormat attributes are persisted in session or cookie and sent along with the request from research from a few other repos:

• LogoutRequest returns StatusCode Requester instead of Success SAML-Toolkits/java-saml#154 (comment)
• https://github.com/onelogin/wordpress-saml/blob/master/onelogin-saml-sso/php/functions.php#L482-L487

Not sure if this helps anyone, but I handle this a different way

When the user logs in, I store the UUID of the tenant that authenticated in the session. I do this in the event listener that runs the auth logic once a tenant sends back the handshake.

            // Store the saml2_uuid in the session
            session()->forget('saml2_uuid');
            session()->put('saml2_uuid', $tenant->uuid);

Then when the user logs out, I just redirect them manually with the stored UUID.

    /**
     * Custom logout logic to notify the IDP of the logout
     *
     * @param Request $request
     *
     * @return \Illuminate\Http\RedirectResponse
     */
    public function logout(Request $request)
    {
        $saml2_uuid = session()->get('saml2_uuid');

        $user_is_sso = Auth::user()->is_sso;

        Auth::logout();

        $request->session()->invalidate();
        $request->session()->regenerateToken();

        if ($user_is_sso && $saml2_uuid) {
            // Now, redirect to SAML2 IdP logout
            return redirect()->route('saml.logout', [
                'uuid' => $saml2_uuid
            ]);
        } else {
            return redirect('login');
        }
    }