One of the hardest problems with making a configurable Enterprise Software thing with a strong brand is figuring out how not to make every misconfiguration a reflection on the brand; there’s no Workday specific reason your configuration had to federate logout in this way.

In the same vein, I always thought it was a mistake that Workday branded the recruiting portal so strongly; everyone is furious that they can’t share an account across applications but it really makes sense. They’re supplying the Workday customer with their recruiting data / PII using Workday, not furnishing that data to Workday directly, so sharing across customers would require a whole legal and data tenancy refactoring.

(disclosure: I worked at Workday for a long time ages ago and people were certainly not living with their heads in the sand. I don’t think I particularly agree with the direction the company is going but it is always interesting to reflect on some of these threads and the challenges with running that kind of business)