AzureAD B2C - SAML LogoutRequest are not signed - azure-ad-b2c

Question

We have a custom policy that federates to an ADFS IDP (using SAML). Login works fine. But logout is failing or ignored.
ADFS is logging an error in it's eventlog:
MSIS7084: SAML logout request and logout response messages must be signed when using SAML HTTP Redirect or HTTP POST binding.
Viewing the GET request built by B2C, it is indeed missing a Signature. It not a query parameter nor in the saml body.
Signatures are being sent for the login requests (as query parameters).
Here's the metadata settings for the Claims Provider:
<Metadata>
<Item Key="IssuerUri">https://ourissuer</Item>
<Item Key="PartnerEntity">metadata removed for brevity</Item>
<Item Key="XmlSignatureAlgorithm">Sha256</Item>
<Item Key="ResponsesSigned">true</Item>
<Item Key="WantsSignedRequests">true</Item>
<Item Key="WantsSignedAssertions">true</Item>
<Item Key="WantsEncryptedAssertions">false</Item>
<Item Key="IdpInitiatedProfileEnabled">true</Item>
<Item Key="IncludeClaimResolvingInClaimsHandling">true</Item>
<Item Key="SingleLogoutEnabled">true</Item>
</Metadata>
What could be wrong?

Answer 1

In order to validate the application , certification should be specified in the ADFS application properties section.
I tried below steps to resolve the reported issue.
Please follow below steps:
Open ADFS
Expand servers
Select the required application
Right click on the application to select properties
Choose signature category and verify If the certificate is trusted and make sure it is not expired.
Your SignAuthnRequest must also be set to true
<PartnerIdentityProvider Name="https://ExampleIdentityProvider" SignAuthnRequest="true"