in src/main/java/org/apache/sling/auth/saml2/impl/AuthenticationHandlerSAML2Impl.java [630:635]
public void dropCredentials(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) throws IOException {
clearSessionAttributes(httpServletRequest);
if(!this.getSaml2LogoutURL().isEmpty()){
httpServletResponse.sendRedirect(this.getSaml2LogoutURL());
}
}