CODEWITHSUNDEEP
blazorazure-ad-b2cmicrosoft-identity-websingle-sign-out
Josh
Josh

Reputation: 16567

SLO From Entra B2C to Blazor App using Microsoft.Identity.Web

I'm having a bit of an issue. I have 3 apps authenticated through my Entra B2C instance. Each app is registered separately inside Entra.

When I initiate a logout from one of the two .net 4.8 apps, my blazor app remains fully authenticated, even when you perform a full page reload. However, if you sign out of the blazor app using the same front channel sign out, it ends the Entra session and signs you out of the app.

In case it matters, this is a blazor application with InteractiveAuto and is using Microsoft.Identity.Web

The front channel logout, which matches the same endpoint I use in-app:

https://myapp.com/MicrosoftIdentity/Account/SignOut

In the app, my sign out link sends the user there and they are signed out. But it doesn't seem to work when called for SLO from Entra. If the user has an active session open in a tab they can continue using the application as if they are still fully authenticated and can even do a full page refresh.

Do I need to make a different/custom SLO url and if so, what does it need to do to cause the active session to fully sign out? I would at least like to get it to the point where if they manually fully reload the open tab it will ask them to log back in. I can always automate checking the session later, I just need it to end when SLO happens.

Upvotes: 0

Views: 20

Answers (0)

Related Questions