title: Log a user out of a SP but not IDP
body: <p>Is it possible to log a user out of an application that uses SAML authentication, but keep them logged into the IDP so they can continue to access other service providers?</p>
  
  <p>I want to be able to log a user out of an application, and have them authenticate when they return to the application without logging them out of the IDP (i.e. I don't want to use single sign out). Is this possible with SAML?</p>