Furthermore, the default behavior is to issue single sign out
callbacks in response to a logout request or when a TGT is expired via
expiration policy when a TicketRegistryCleaner runs. If
you are using ticket registry cleaner and you want to enable the single
sign out callback only when CAS receives a logout request, you can
configure your TicketRegistryCleaner as such:
<bean id="ticketRegistryCleaner" class="org.jasig.cas.ticket.registry.support.DefaultTicketRegistryCleaner"
p:ticketRegistry-ref="ticketRegistry"
p:lock-ref="cleanerLock"
p:logUserOutOfServices="${slo.callbacks.disabled:false}" />