John
John

Reputation: 536

ADAL tokens not revoking on logout

Im able to login to my angularjs app using the angular adal library I can get a token and verify this token. My question is the following:

If i signout, should the token get revoked automatically? If not, how do i do so?

Upvotes: 0

Views: 284

Answers (1)

Marilee Turscak - MSFT
Marilee Turscak - MSFT

Reputation: 7728

Currently Azure Active Directory does not support or provide an endpoint for an application to revoke the access/refresh tokens.

You may read more about configurable token lifetimes in Azure Active Directory to check the policies on token lifetimes and adjust that base on your requirement .

There is a sample logout code that you may be able to integrate as a workaround. See: Can Azure AD ADAL (ios) refresh token be revoked from the client?

Upvotes: 1

Related Questions