diff --git a/src/modules/ui/layout/topbar/UserMenu.unit.ts b/src/modules/ui/layout/topbar/UserMenu.unit.ts
index 25a93766ad..45c5fe1051 100644
--- a/src/modules/ui/layout/topbar/UserMenu.unit.ts
+++ b/src/modules/ui/layout/topbar/UserMenu.unit.ts
@@ -1,23 +1,38 @@
 import { mount } from "@vue/test-utils";
-import UserMenu from "./UserMenu.vue";
 import {
 	createTestingI18n,
 	createTestingVuetify,
 } from "@@/tests/test-utils/setup";
 import { createModuleMocks } from "@@/tests/test-utils/mock-store-module";
+import { envsFactory } from "@@/tests/test-utils";
 import { AUTH_MODULE_KEY, ENV_CONFIG_MODULE_KEY } from "@/utils/inject";
 import AuthModule from "@/store/auth";
 import EnvConfigModule from "@/store/env-config";
-import { LanguageType } from "@/serverApi/v3";
+import { LanguageType, MeSystemResponse } from "@/serverApi/v3";
+import { VBtn } from "vuetify/lib/components/index.mjs";
+import UserMenu from "./UserMenu.vue";
+
+jest.mock("@data-system");
 
 describe("@ui-layout/UserMenu", () => {
-	const setup = () => {
+	const setupWrapper = (
+		isExternalFeatureEnabled = false,
+		mockedSystem?: MeSystemResponse
+	) => {
 		const authModule = createModuleMocks(AuthModule, {
 			getLocale: "de",
 			logout: jest.fn(),
+			externalLogout: jest.fn(),
+			get loginSystem(): MeSystemResponse | undefined {
+				return mockedSystem;
+			},
 		});
+
 		const envConfigModule = createModuleMocks(EnvConfigModule, {
 			getAvailableLanguages: [LanguageType.De, LanguageType.En],
+			getEnv: envsFactory.build({
+				FEATURE_EXTERNAL_SYSTEM_LOGOUT_ENABLED: isExternalFeatureEnabled,
+			}),
 		});
 
 		const wrapper = mount(UserMenu, {
@@ -41,15 +56,19 @@ describe("@ui-layout/UserMenu", () => {
 		return { wrapper, authModule };
 	};
 
+	afterEach(() => {
+		jest.clearAllMocks();
+	});
+
 	it("should render with correct user initials", async () => {
-		const { wrapper } = setup();
+		const { wrapper } = setupWrapper();
 
 		const initials = wrapper.findComponent("[data-testid=user-menu-btn]");
 		expect(initials.text()).toMatch("AD");
 	});
 
 	it("should render correct active user name with role", async () => {
-		const { wrapper } = setup();
+		const { wrapper } = setupWrapper();
 
 		const menuBtn = wrapper.findComponent({ name: "VBtn" });
 		await menuBtn.trigger("click");
@@ -61,7 +80,7 @@ describe("@ui-layout/UserMenu", () => {
 	});
 
 	it("should trigger logout function on logout item click", async () => {
-		const { wrapper, authModule } = setup();
+		const { wrapper, authModule } = setupWrapper();
 
 		const menuBtn = wrapper.findComponent({ name: "VBtn" });
 		await menuBtn.trigger("click");
@@ -72,4 +91,142 @@ describe("@ui-layout/UserMenu", () => {
 
 		expect(authModule.logout).toHaveBeenCalled();
 	});
+
+	describe("external logout", () => {
+		describe("when feature flag is enabled and end session endpoint is available for the system", () => {
+			const setup = () => {
+				const mockedSystem: MeSystemResponse = {
+					id: "testId",
+					name: "Test System",
+					hasEndSessionEndpoint: true,
+				};
+
+				const { wrapper, authModule } = setupWrapper(true, mockedSystem);
+
+				return { wrapper, authModule, mockedSystem };
+			};
+
+			it("should show the external logout button", async () => {
+				const { wrapper, mockedSystem } = setup();
+
+				const menuBtn = wrapper.findComponent(VBtn);
+				await menuBtn.trigger("click");
+
+				const externalLogoutBtn = wrapper.findComponent(
+					"[data-testid=external-logout]"
+				);
+
+				expect(externalLogoutBtn.exists()).toBe(true);
+				expect(externalLogoutBtn.text()).toEqual(
+					`common.labels.logout Bildungscloud & ${mockedSystem.name}`
+				);
+			});
+
+			it("should trigger external logout function on logout item click", async () => {
+				const { wrapper, authModule } = setup();
+
+				const menuBtn = wrapper.findComponent(VBtn);
+				await menuBtn.trigger("click");
+
+				const externalLogoutBtn = wrapper.findComponent(
+					"[data-testid=external-logout]"
+				);
+
+				expect(externalLogoutBtn.exists()).toBe(true);
+				await externalLogoutBtn.trigger("click");
+
+				expect(authModule.externalLogout).toHaveBeenCalled();
+			});
+
+			it("should show the correct text for the logout button", async () => {
+				const { wrapper } = setup();
+
+				const menuBtn = wrapper.findComponent(VBtn);
+				await menuBtn.trigger("click");
+
+				const logoutBtn = wrapper.findComponent("[data-testid=logout]");
+
+				expect(logoutBtn.exists()).toBe(true);
+				expect(logoutBtn.text()).toEqual(`common.labels.logout Bildungscloud`);
+			});
+		});
+
+		describe("when feature flag is disabled", () => {
+			const setup = () => {
+				const mockedSystem: MeSystemResponse = {
+					id: "testId",
+					name: "Test System",
+					hasEndSessionEndpoint: true,
+				};
+
+				const { wrapper } = setupWrapper(false, mockedSystem);
+
+				return { wrapper };
+			};
+
+			it("should not show the external logout button", async () => {
+				const { wrapper } = setup();
+
+				const menuBtn = wrapper.findComponent(VBtn);
+				await menuBtn.trigger("click");
+
+				const externalLogoutBtn = wrapper.findComponent(
+					"[data-testid=external-logout]"
+				);
+
+				expect(externalLogoutBtn.exists()).toBe(false);
+			});
+
+			it("should show the correct text for the logout button", async () => {
+				const { wrapper } = setup();
+
+				const menuBtn = wrapper.findComponent(VBtn);
+				await menuBtn.trigger("click");
+
+				const logoutBtn = wrapper.findComponent("[data-testid=logout]");
+
+				expect(logoutBtn.exists()).toBe(true);
+				expect(logoutBtn.text()).toEqual("common.labels.logout");
+			});
+		});
+
+		describe("when end session endpoint is not available for the systeme", () => {
+			const setup = () => {
+				const mockedSystem: MeSystemResponse = {
+					id: "testId",
+					name: "Test System",
+					hasEndSessionEndpoint: false,
+				};
+
+				const { wrapper } = setupWrapper(true, mockedSystem);
+
+				return { wrapper };
+			};
+
+			it("should not show the external logout button", async () => {
+				const { wrapper } = setup();
+
+				const menuBtn = wrapper.findComponent(VBtn);
+				await menuBtn.trigger("click");
+
+				const externalLogoutBtn = wrapper.findComponent(
+					"[data-testid=external-logout]"
+				);
+
+				expect(externalLogoutBtn.exists()).toBe(false);
+			});
+
+			it("should show the correct text for the logout button", async () => {
+				const { wrapper } = setup();
+
+				const menuBtn = wrapper.findComponent(VBtn);
+				await menuBtn.trigger("click");
+
+				const logoutBtn = wrapper.findComponent("[data-testid=logout]");
+
+				expect(logoutBtn.exists()).toBe(true);
+				expect(logoutBtn.text()).toEqual("common.labels.logout");
+			});
+		});
+	});
 });
diff --git a/src/modules/ui/layout/topbar/UserMenu.vue b/src/modules/ui/layout/topbar/UserMenu.vue
index 40a7cf39e0..ec99654fd2 100644
--- a/src/modules/ui/layout/topbar/UserMenu.vue
+++ b/src/modules/ui/layout/topbar/UserMenu.vue
@@ -1,5 +1,5 @@
 <template>
-	<VMenu width="215">
+	<VMenu :width="isExternalLogoutAllowed ? 'auto' : '215'">
 		<template v-slot:activator="{ props }">
 			<VBtn
 				v-bind="props"
@@ -21,19 +21,32 @@
 			<VListItem href="/account" data-testid="account-link">
 				{{ $t("global.topbar.settings") }}
 			</VListItem>
+			<VListItem
+				v-if="isExternalLogoutAllowed"
+				data-testid="external-logout"
+				@click="externalLogout"
+			>
+				{{ $t("common.labels.logout")
+				}}{{ isExternalLogoutAllowed ? ` Bildungscloud & ${systemName}` : "" }}
+			</VListItem>
 			<VListItem data-testid="logout" @click="logout">
-				{{ $t("common.labels.logout") }}
+				{{ $t("common.labels.logout")
+				}}{{ isExternalLogoutAllowed ? " Bildungscloud" : "" }}
 			</VListItem>
 		</VList>
 	</VMenu>
 </template>
 
 <script setup lang="ts">
-import { computed, PropType, toRef } from "vue";
+import { computed, ComputedRef, PropType, toRef } from "vue";
 import { useI18n } from "vue-i18n";
 import LanguageMenu from "./LanguageMenu.vue";
 import { MeUserResponse } from "@/serverApi/v3";
-import { injectStrict, AUTH_MODULE_KEY } from "@/utils/inject";
+import {
+	injectStrict,
+	AUTH_MODULE_KEY,
+	ENV_CONFIG_MODULE_KEY,
+} from "@/utils/inject";
 
 const props = defineProps({
 	user: {
@@ -48,6 +61,7 @@ const props = defineProps({
 
 const { t } = useI18n();
 const authModule = injectStrict(AUTH_MODULE_KEY);
+const envConfigModule = injectStrict(ENV_CONFIG_MODULE_KEY);
 
 const userRole = computed(() => {
 	return t(`common.roleName.${toRef(props.roleNames).value[0]}`).toString();
@@ -57,9 +71,21 @@ const initials = computed(() => {
 	return props.user.firstName.slice(0, 1) + props.user.lastName.slice(0, 1);
 });
 
+const isExternalLogoutAllowed: ComputedRef<boolean> = computed(
+	() =>
+		envConfigModule.getEnv.FEATURE_EXTERNAL_SYSTEM_LOGOUT_ENABLED &&
+		!!authModule.loginSystem?.hasEndSessionEndpoint
+);
+
+const systemName: string = authModule.loginSystem?.name ?? "System";
+
 const logout = () => {
 	authModule.logout();
 };
+
+const externalLogout = () => {
+	authModule.externalLogout();
+};
 </script>
 
 <style scoped>
diff --git a/src/serverApi/v3/api.ts b/src/serverApi/v3/api.ts
index 8eca4a4509..0353e658ad 100644
--- a/src/serverApi/v3/api.ts
+++ b/src/serverApi/v3/api.ts
@@ -1585,6 +1585,12 @@ export interface ConfigResponse {
      * @memberof ConfigResponse
      */
     FEATURE_ROOMS_ENABLED: boolean;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof ConfigResponse
+     */
+    FEATURE_EXTERNAL_SYSTEM_LOGOUT_ENABLED: boolean;
 }
 /**
  * 
@@ -4837,6 +4843,12 @@ export interface MeResponse {
      * @memberof MeResponse
      */
     account: MeAccountResponse;
+    /**
+     * 
+     * @type {MeSystemResponse}
+     * @memberof MeResponse
+     */
+    system?: MeSystemResponse;
 }
 /**
  * 
@@ -4901,6 +4913,31 @@ export interface MeSchoolResponse {
      */
     logo: MeSchoolLogoResponse;
 }
+/**
+ * 
+ * @export
+ * @interface MeSystemResponse
+ */
+export interface MeSystemResponse {
+    /**
+     * 
+     * @type {string}
+     * @memberof MeSystemResponse
+     */
+    id: string;
+    /**
+     * 
+     * @type {string}
+     * @memberof MeSystemResponse
+     */
+    name?: string;
+    /**
+     * 
+     * @type {boolean}
+     * @memberof MeSystemResponse
+     */
+    hasEndSessionEndpoint: boolean;
+}
 /**
  * 
  * @export
@@ -6217,6 +6254,12 @@ export interface OauthConfigResponse {
      * @memberof OauthConfigResponse
      */
     jwksEndpoint: string;
+    /**
+     * End session endpoint
+     * @type {string}
+     * @memberof OauthConfigResponse
+     */
+    endSessionEndpoint?: string;
 }
 /**
  * 
@@ -10839,6 +10882,40 @@ export const AuthenticationApiAxiosParamCreator = function (configuration?: Conf
                 options: localVarRequestOptions,
             };
         },
+        /**
+         * 
+         * @summary Logs out a user from the external system.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        logoutControllerExternalSystemLogout: async (options: any = {}): Promise<RequestArgs> => {
+            const localVarPath = `/logout/external`;
+            // use dummy base URL string because the URL constructor only accepts absolute URLs.
+            const localVarUrlObj = new URL(localVarPath, DUMMY_BASE_URL);
+            let baseOptions;
+            if (configuration) {
+                baseOptions = configuration.baseOptions;
+            }
+
+            const localVarRequestOptions = { method: 'POST', ...baseOptions, ...options};
+            const localVarHeaderParameter = {} as any;
+            const localVarQueryParameter = {} as any;
+
+            // authentication bearer required
+            // http bearer authentication required
+            await setBearerAuthToObject(localVarHeaderParameter, configuration)
+
+
+    
+            setSearchParams(localVarUrlObj, localVarQueryParameter, options.query);
+            let headersFromBaseOptions = baseOptions && baseOptions.headers ? baseOptions.headers : {};
+            localVarRequestOptions.headers = {...localVarHeaderParameter, ...headersFromBaseOptions, ...options.headers};
+
+            return {
+                url: toPathString(localVarUrlObj),
+                options: localVarRequestOptions,
+            };
+        },
         /**
          * 
          * @summary Logs out a user.
@@ -10916,6 +10993,16 @@ export const AuthenticationApiFp = function(configuration?: Configuration) {
             const localVarAxiosArgs = await localVarAxiosParamCreator.loginControllerLoginOauth2(oauth2AuthorizationBodyParams, options);
             return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
         },
+        /**
+         * 
+         * @summary Logs out a user from the external system.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        async logoutControllerExternalSystemLogout(options?: any): Promise<(axios?: AxiosInstance, basePath?: string) => AxiosPromise<void>> {
+            const localVarAxiosArgs = await localVarAxiosParamCreator.logoutControllerExternalSystemLogout(options);
+            return createRequestFunction(localVarAxiosArgs, globalAxios, BASE_PATH, configuration);
+        },
         /**
          * 
          * @summary Logs out a user.
@@ -10966,6 +11053,15 @@ export const AuthenticationApiFactory = function (configuration?: Configuration,
         loginControllerLoginOauth2(oauth2AuthorizationBodyParams: Oauth2AuthorizationBodyParams, options?: any): AxiosPromise<LoginResponse> {
             return localVarFp.loginControllerLoginOauth2(oauth2AuthorizationBodyParams, options).then((request) => request(axios, basePath));
         },
+        /**
+         * 
+         * @summary Logs out a user from the external system.
+         * @param {*} [options] Override http request option.
+         * @throws {RequiredError}
+         */
+        logoutControllerExternalSystemLogout(options?: any): AxiosPromise<void> {
+            return localVarFp.logoutControllerExternalSystemLogout(options).then((request) => request(axios, basePath));
+        },
         /**
          * 
          * @summary Logs out a user.
@@ -11014,6 +11110,15 @@ export interface AuthenticationApiInterface {
      */
     loginControllerLoginOauth2(oauth2AuthorizationBodyParams: Oauth2AuthorizationBodyParams, options?: any): AxiosPromise<LoginResponse>;
 
+    /**
+     * 
+     * @summary Logs out a user from the external system.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AuthenticationApiInterface
+     */
+    logoutControllerExternalSystemLogout(options?: any): AxiosPromise<void>;
+
     /**
      * 
      * @summary Logs out a user.
@@ -11068,6 +11173,17 @@ export class AuthenticationApi extends BaseAPI implements AuthenticationApiInter
         return AuthenticationApiFp(this.configuration).loginControllerLoginOauth2(oauth2AuthorizationBodyParams, options).then((request) => request(this.axios, this.basePath));
     }
 
+    /**
+     * 
+     * @summary Logs out a user from the external system.
+     * @param {*} [options] Override http request option.
+     * @throws {RequiredError}
+     * @memberof AuthenticationApi
+     */
+    public logoutControllerExternalSystemLogout(options?: any) {
+        return AuthenticationApiFp(this.configuration).logoutControllerExternalSystemLogout(options).then((request) => request(this.axios, this.basePath));
+    }
+
     /**
      * 
      * @summary Logs out a user.
diff --git a/src/store/auth.ts b/src/store/auth.ts
index 0d6208ebf5..3f11b48aea 100644
--- a/src/store/auth.ts
+++ b/src/store/auth.ts
@@ -4,6 +4,7 @@ import {
 	MeApiInterface,
 	MeResponse,
 	MeSchoolResponse,
+	MeSystemResponse,
 	MeUserResponse,
 	UserApiFactory,
 	UserApiInterface,
@@ -139,6 +140,10 @@ export default class AuthModule extends VuexModule {
 		return !!this.accessToken;
 	}
 
+	get loginSystem(): MeSystemResponse | undefined {
+		return this.me?.system;
+	}
+
 	@Action
 	async login(jwt: string) {
 		const { data } = await this.meApi.meControllerMe();
@@ -184,4 +189,11 @@ export default class AuthModule extends VuexModule {
 		delete $axios.defaults.headers.common["Authorization"];
 		window.location.replace(redirectUrl);
 	}
+
+	@Action
+	externalLogout(): void {
+		localStorage.clear();
+		delete $axios.defaults.headers.common["Authorization"];
+		window.location.replace("/logout/external");
+	}
 }
diff --git a/src/store/auth.unit.ts b/src/store/auth.unit.ts
index e8c50f0510..9195e638a9 100644
--- a/src/store/auth.unit.ts
+++ b/src/store/auth.unit.ts
@@ -1,5 +1,5 @@
 import * as serverApi from "@/serverApi/v3/api";
-import { LanguageType } from "@/serverApi/v3/api";
+import { LanguageType, MeSystemResponse } from "@/serverApi/v3/api";
 import { envConfigModule } from "@/store";
 import { initializeAxios } from "@/utils/api";
 import {
@@ -247,6 +247,23 @@ describe("auth store module", () => {
 				expect(authModule.isLoggedIn).toBe(true);
 			});
 		});
+
+		describe("loginSystem", () => {
+			it("should system info of the user", () => {
+				const authModule = new AuthModule({});
+				const mockedSystem: MeSystemResponse = {
+					id: "test-system-id",
+					name: "test system",
+					hasEndSessionEndpoint: false,
+				};
+				const mockMe = meResponseFactory.build({
+					system: mockedSystem,
+				});
+				authModule.setMe(mockMe);
+
+				expect(authModule.loginSystem).toStrictEqual(mockedSystem);
+			});
+		});
 	});
 
 	describe("actions", () => {
@@ -372,5 +389,38 @@ describe("auth store module", () => {
 				});
 			});
 		});
+
+		describe("externalLogout", () => {
+			const setup = () => {
+				initializeAxios({
+					defaults: {
+						headers: {
+							common: {
+								Authorization: "",
+							},
+						},
+					},
+				} as AxiosInstance);
+
+				const authModule = new AuthModule({});
+
+				const mockReplace = jest.fn();
+				Object.defineProperty(window, "location", {
+					configurable: true,
+					value: { replace: mockReplace },
+				});
+
+				return { authModule, mockReplace };
+			};
+
+			describe("when external logout action is called", () => {
+				it("should replace the window.location", () => {
+					const { authModule, mockReplace } = setup();
+
+					authModule.externalLogout();
+					expect(mockReplace).toHaveBeenLastCalledWith("/logout/external");
+				});
+			});
+		});
 	});
 });
diff --git a/src/store/env-config-defaults.ts b/src/store/env-config-defaults.ts
index 961423679e..28c4cf759f 100644
--- a/src/store/env-config-defaults.ts
+++ b/src/store/env-config-defaults.ts
@@ -77,4 +77,5 @@ export const defaultConfigEnvs: ConfigResponse = {
 	FEATURE_ROOMS_ENABLED: false,
 	CALENDAR_SERVICE_ENABLED: false,
 	FEATURE_PREFERRED_CTL_TOOLS_ENABLED: false,
+	FEATURE_EXTERNAL_SYSTEM_LOGOUT_ENABLED: false,
 };