For user to logout normally we have logoffUri parameter in the aco,for that work do we need to have full path to resource such as /web/unprotected/logout.jsp or is it okf if have like /web/unprotected/
Refer : IgnoreURL ACO parameter
For example, "https://support.ca.com/connection/weblink?pageab=AA_CHANGEPWD" is a [scheme][hostname.domainname][resource/relative_uri][querystring].
The IgnoreUrl applies to the resource/relative_url and does not include the query string, which means only the /connection/weblink will be evaluated.
Ignore the above post, It should be /web/unprotected/logout.jsp .
Thanks now clarified the previous post was totally confused me.
The LogOffUri ACO needs to be relative URI to the actual logout page. Do not specify fully qualified URL.