OAM11g Single Sign Off for Console's

OAM11g when installed in a weblogic domain will automatically protect the consoles through IDMDomainAgent.

But if you do have the WebServer layer which is protected by 11g webgate in order to perform single sign off , you need to list the url's in agents logout URL

Open the Agent configuration and add the logout URL's for the consoles which you would like to perform single sign off from

Here are the URL's for various consoles

1.WebLogic Console
/console/jsp/common/logout.jsp

2. EM Console
/em/targetauth/emaslogout.jsp

3. OAM Console
/oamsso/logout.html

Now you should be able to perform single sign off for these console from web server layer