diff --git a/oauthproxy.go b/oauthproxy.go
index 46f5b528..88fcdfb0 100644
--- a/oauthproxy.go
+++ b/oauthproxy.go
@@ -805,6 +805,12 @@ func (p *OAuthProxy) backendLogout(rw http.ResponseWriter, req *http.Request, si
 		}
 
 		resp, err = PicsSignOutAllSessions(providerData.BackendLogoutAllSessionsURL, session.IntrospectClaims, session.AccessToken)
+		if err != nil {
+			logger.Errorf("error while calling backend logout all sessions: %v", err)
+			return
+		}
+
+		defer resp.Body.Close()
 	} else {
 		if providerData.BackendLogoutURL == "" {
 			return
@@ -814,14 +820,14 @@ func (p *OAuthProxy) backendLogout(rw http.ResponseWriter, req *http.Request, si
 		// security exception because URL is dynamic ({id_token} replacement) but
 		// base is not end-user provided but comes from configuration somewhat secure
 		resp, err = http.Get(backendLogoutURL) // #nosec G107
+		if err != nil {
+			logger.Errorf("error while calling backend logout: %v", err)
+			return
+		}
+
+		defer resp.Body.Close()
 	}
 
-	if err != nil {
-		logger.Errorf("error while calling backend logout: %v", err)
-		return
-	}
-
-	defer resp.Body.Close()
 	if resp.StatusCode != 200 {
 		logger.Errorf("error while calling backend logout url, returned error code %v", resp.StatusCode)
 	}