We are in the process of implementing a CIS2 integration in our primary identity provider to allow our customers to have SSO across our whole suite if their primary healthcare product is directly integrated with CIS2.
For all integrations of this type we look offer the option of signing out of the upstream IDP (be that CIS2, Entra ID, Google etc) when signing out of a client application and in turn out IDP.
Unfortunately it seems that even though the OIDC discovery doc does advertise an end_session_endpoint it is not implemented in CIS2 and returns a 404.
This doc has it down as a possible future feature: 9. Session management - NHS England Digital
Is this feature planned? If not what is the recommendation for handling end-to-end sign out initiated in a client application?
Thanks in advance.