To enable single logout, add following entry to security.yml:
security:
...
firewalls:
main:
light_saml_sp:
...
logout:
path: lightsaml_sp.logout
target: default
invalidate_session: false
success_handler: security.firewall.logout_handler.lightsaml_sp
That's all. Now you can logout using path /saml/logout.