I have single sign on working beautifully, but single sign-out is not working.
The scenario is like this:
I've had basically the same configuration for my application before I switched to the spring configuration. I had a look on the SVN and basically the only difference to your config is the use of the Single Sign Out Listener
listener>
org.jasig.cas.client.session.SingleSignOutHttpSessionListener
Could this work for you? Of course don't forget to add it on both WebApps if it works.
UPDATE: I found the description of the listener in the docs, and it should do what's missing in your setting