diff --git a/deploy/authentication-setup.mdx b/deploy/authentication-setup.mdx index 21c60993d..daadbeaa2 100644 --- a/deploy/authentication-setup.mdx +++ b/deploy/authentication-setup.mdx @@ -101,7 +101,7 @@ Your host your documentation at `docs.foo.com` and your entire team has access t * **Additional authorization parameters** (optional): Additional query parameters to add to the initial authorization request. * **Token URL**: Your OAuth token exchange endpoint. * **Info API URL** (optional): Endpoint on your server that Mintlify calls to retrieve user info. Required for group-based access control. If omitted, the OAuth flow only verifies identity. - * **Logout URL** (optional): The native logout URL for your OAuth provider. Mintlify redirects users to this URL with a `GET` request when they log out. Mintlify does not append query parameters, so include any parameters (for example, `returnTo`) directly in the URL. Configure a page to redirect users to on a successful logout. + * **Logout URL** (optional): The native logout URL for your OAuth provider. When users log out, Mintlify validates the logout redirect against this configured URL for security. The redirect only succeeds if it exactly matches the configured `logoutUrl`. If you do not configure a logout URL, users redirect to `/login`. Mintlify redirects users with a `GET` request and does not append query parameters, so include any parameters (for example, `returnTo`) directly in the URL. * **Redirect URL** (optional): The URL to redirect users to after authentication. 5. Click **Save changes**.