Storefront SSO does not provide automatic logout. If a shopper signs out of Commerce Cloud or if the shopper’s session times out, the shopper may continue to be logged into the identity provider until the identity provider session times out. Similarly, if the shopper signs out or is timed out of the identity provider, the shopper may remain logged into Commerce Cloud until the Commerce Cloud session times out.

If a Commerce Cloud storefront uses SSO exclusively, customer service agents cannot reset shopper passwords in the Agent Console; shopper passwords can be reset only in the identity provider. If a Commerce Cloud storefront supports both SSO and standard logins, passwords of shoppers using standard logins can be reset in the Agent Console, but passwords of shoppers using SSO can be reset only in the identity provider.