I'd like to synchronize signing out of my SSO provider (Authentik via OIDC, in this case) with signing out of Immich on the web. There are a couple of ways to go about this, but I'm having trouble finding if Immich currently provides any of them.
It seems like the simplest way would be just if there's a static non-API-level URL that can be hit to trigger the logout for front-channel sign out path in Authentik - but if it exists, I haven't been able to discover it.
The most desirable way would probably be back-channel logout via a URL that can be posted to. There's the Immich API, but that requires an API token that I'm not sure I can inject into Authentik.
I'm having a bit of trouble discovering if there's an existing way to do this, just because the terms involved are so overloaded. Much appreciated on any help!