Is checkmk SAML 2.0 capable?

Federated logout is not supported in SAML because there is no way for the IdP to inform every SP that a user is logged out. The lack of backchannel communication between IdP and SP is a feature (and a useful one). An SP can redirect to the IdP logout page and the user can logout of the IdP, but they can still use valid sessions on other sites.

The only real federated logout is quitting the browser.