From 1c50717c428932bb467fff287a91c428fa71cd01 Mon Sep 17 00:00:00 2001
From: Wesley Cabus <wesley@gotsharp.be>
Date: Fri, 16 Jan 2026 15:25:56 +0100
Subject: [PATCH 1/2] Update .gitignore to stop tracking some copilot stuff

---
 .gitignore | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.gitignore b/.gitignore
index 33084b8ec..d2afc7bd6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -21,4 +21,5 @@ pnpm-debug.log*
 # macOS-specific files
 .DS_Store
 .vscode/settings.json
-*.iml
\ No newline at end of file
+*.iml
+.idea/**/copilot.data.migration.*.xml
\ No newline at end of file

From e77d8e725bfbbe0db6bc91a34bbcf2e0f4d0748b Mon Sep 17 00:00:00 2001
From: Wesley Cabus <wesley@gotsharp.be>
Date: Fri, 16 Jan 2026 15:52:59 +0100
Subject: [PATCH 2/2] Clarified that external IDP sign-out is typically
 front-channel based

---
 .../identityserver/ui/logout/external-notification.md  | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/src/content/docs/identityserver/ui/logout/external-notification.md b/src/content/docs/identityserver/ui/logout/external-notification.md
index 76b6efb5a..09abb2086 100644
--- a/src/content/docs/identityserver/ui/logout/external-notification.md
+++ b/src/content/docs/identityserver/ui/logout/external-notification.md
@@ -22,6 +22,12 @@ out" page.
 IdentityServer must then notify all of its clients (as discussed [here](/identityserver/ui/logout)), also typically in the form of a
 request in an `<iframe>` from within the external identity provider's `<iframe>`.
 
+:::note
+To configure federated sign-out from an external identity provider, please refer to the documentation for your specific
+external identity provider. When using an OpenID Connect identity provider, this is typically configured using the
+front-channel logout URI.
+:::
+
 What makes federated sign-out a special case (when compared to a normal [logout](/identityserver/ui/logout)) is that the federated
 sign-out request is not to the normal sign-out endpoint in IdentityServer.
 In fact, each external IdentityProvider will have a different endpoint into your IdentityServer host.
@@ -36,7 +42,7 @@ federated sign-out.
 
 Fortunately IdentityServer already contains this code.
 When requests come into IdentityServer and invoke the handlers for external authentication providers, IdentityServer
-detects if these are federated signout requests and if they are it will automatically render the same `<iframe>`
+detects if these are federated sign-out requests and if they are it will automatically render the same `<iframe>`
 as [described here for logout](/identityserver/ui/logout).
 
-In short, federated signout is automatically supported.
+In short, federated sign-out is automatically supported.