- Federated logout for OIDC and Okta enterprise connections is now generally available; adding `?federated` to the logout URL triggers Auth0 to call the IdP's `end_session_endpoint` and terminate the upstream session.
- If the IdP does not provide an `end_session_endpoint`, Auth0 still logs the user out locally and records a `federated_logout_failed` tenant log.
- Feature is enabled on all plans that include enterprise connections and requires no extra configuration for compliant IdPs.