Hi, has anyone used gsuite / google as a SAML IDP with netscaler as the SP? I've used some of Mr Bretty's notes as inspiration and I'm happy to say i've managed to get most of it to work (Thanks Dave!) - apart from the bloody logoff button in the webpage. Even my FAS works... However when I hit logoff, it looks like it has been successful but opening the browser again the user is re-logged in without having to enter their credentials. If I clear the browser cookies it works fine. I've been pointed to the fact that google doesn't seem to support SLO which seems a bit odd (and a security hole)? Anyway their FAQ states: How can the non-persistent session cookie that identifies a user during a browser session be deleted (e.g. upon logout)?   After successful authentication via SAML, Google sets a session cookie to identify an user's session. When the user explicitly logs out (e.g. by clicking the logout button), this cookie needs to be destroyed. If your implementation involves persistent session management ("remember me on this computer" functionality), you may need to control how and when this cookie is destroyed. Upon logout, Google redirects to your logout servlet. In your logout servlet, you may present the user with some options that could determine whether the session cookie should be deleted or not. I am clearly into areas I don't understand 🙂 - can anyone shed any light on how I would just delete the freaking cookie?