In SMA 12.5, the SAML logout is available for connect tunnel clients. When users disconnect the tunnel, they logout from their session on the IdP as well.
For Windows, refer to Support for SAML Authentication.
For mac OS, refer to Support for SAML Authentication.