I did a bit of digging here, and it looks to me like /user/logout should be whitelisted in the middleware, and shouldn't present that "Access to Galaxy user controls is disabled".

I might need a little more information.  What revision of Galaxy are you running?  Are you serving Galaxy at a subdomain or is any other nonstandard routing in place?  As an admin user, if you just directly navigate to http://<your_galaxy_instance>/user/logout, you get the same path-blocked error message?

On Wed, Jul 27, 2016 at 1:15 PM Ryan G <ngsbioinformatics@gmail.com> wrote:
Thanks.  Clearing out the browser history resolved it but there should be a better way...

On Wed, Jul 27, 2016 at 12:48 PM, Dannon Baker <dannon.baker@gmail.com> wrote:
Hey, thanks for this.  I've made an issue (https://github.com/galaxyproject/galaxy/issues/2671)  and will check it out today.

On Wed, Jul 27, 2016 at 12:44 PM Ryan G <ngsbioinformatics@gmail.com> wrote:
Hi all - We are using a SSO system so that user's authenticate externally from Galaxy.

when I impersonate a user then try to log out as that user, I'm unable to.  I get the page "

Access to Galaxy user controls is disabled

User controls are disabled when Galaxy is configured for external authentication."


If I close the browser down, and restart, I get my SSO log in page, but when I get to Galaxy, I'm still impersonating the user. 


___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  https://lists.galaxyproject.org/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/

___________________________________________________________
Please keep all replies on the list by using "reply all"
in your mail client.  To manage your subscriptions to this
and other Galaxy lists, please use the interface at:
  https://lists.galaxyproject.org/

To search Galaxy mailing lists use the unified search at:
  http://galaxyproject.org/search/mailinglists/