rSTS using any IdP does not clear credentials after logout (4371537)

rSTS has been configured in Password Manager to authenticate users against any Identity Provider (IdP). Once a user logs in, the user credentials are cached in the browser session.
 

This is the functionality expected by default.

To change this functionality:

1. Log into the .../RSTS/Admin URL (specify your rSTS host FQDN) using the secret specified when configuring rSTS
2. Navigate to Authentication Providers, click on the provider, and check off the Always Require Authentication checkbox
3. Click Finish to save the setting, then test functionality again in a browser