Indeed, this one needs to trigger the front-channel SLO as well. I had in mind that it was not necessary due to the fact it was the first service granted at authentication (so no previous service to logout), but obviously the "renew" parameter means that it's not the first service...