To reproduce:<br />

1. Must be previously logged out from nuxeo<br />
2. Navigate directly to a nuxeo document e.g.: http://localhost:8080/nuxeo/nxpath/default/default-domain/UserWorkspaces/cburch-ikanow-com/7195035322688821592@view_documents&lt;br />
3. Use user dropdown to select Logout<br />
4. Redirected to "http://localhost:8080/nuxeo/logout" Error page: "Page Not Found"<br /> <br /><br /> Code: InfiniteAuthenticator<br /> I use an authenticator that implements NuxeoAuthenticationPlugin, NuxeoAuthenticationPluginLogoutExtension <br /><br /> It grabs a users cookies and authenticates it with our REST Api to spit back a UserIdentification <br /><br /> Code: InfiniteLoginPlugin<br /> Our login plugin implements LoginPlugin and tries to find a user that already exists in nuxeo, otherwise it creates one using the users email address. <br /><br />

The logout portion of Authenticator:<br /> @Override

public Boolean handleLogout(HttpServletRequest httpRequest, HttpServletResponse httpResponse) 
{
    String cookie = getInfiniteCookie(httpRequest);
    if ( cookie != null)
    {
        InfiniteDriver inf_driver = new InfiniteDriver(getApiUrl(httpRequest, infinite_api_url));
        inf_driver.useExistingCookie(cookie);
        log.debug("Logging user out via cookie");
        inf_driver.logout();
    }
    try
    {
        log.debug("not logged in, redirect to infinite");
        httpResponse.sendRedirect(getLoginUrl(httpRequest, infinite_login_url));
        return true;
    }
    catch (Exception ex)
    {
        log.error("unable to redirect", ex);
    }
    return false;
}

<br /><br /> I can watch the logs when you follow my steps to reproduce and it isn't actually calling this logout function when you do that. It's not until you follow a link to a second page in nuxeo that it'll call my handleLogout instead of what I think is the FORM_AUTH logout page?

I don't know if this can help, but we also experiment some troubles with logout link (and also other links in the document page, but not all them) in a page reach by a permanent link with CAS authentication. This happen without any modification of the default behavior. (see http://answers.nuxeo.com/questions/5797/permanent-links-and-cas-authentication)