且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

Azure AD B2C-从所有会话中注销用户

更新时间:2023-12-02 13:29:58

我可能会迟到.但是,如果有帮助.交流到文档

I might late. But if that helps. A.c to docs

当您将用户重定向到Azure AD B2C注销端点(用于OAuth2和SAML协议)时,Azure AD B2C会从浏览器中清除用户的会话.但是,用户仍可能登录到使用Azure AD B2C进行身份验证的其他应用程序.为了使这些应用程序能够同时注销用户,Azure AD B2C将HTTP GET请求发送到用户当前登录的所有应用程序的已注册LogoutUrl.

When you redirect the user to the Azure AD B2C sign-out endpoint (for both OAuth2 and SAML protocols), Azure AD B2C clears the user's session from the browser. However, the user might still be signed in to other applications that use Azure AD B2C for authentication. To enable those applications to sign the user out simultaneously, Azure AD B2C sends an HTTP GET request to the registered LogoutUrl of all the applications that the user is currently signed in to.

应用程序必须通过清除标识用户的任何会话并返回200响应来响应此请求.如果要在应用程序中支持单点注销,则必须在应用程序的代码中实现LogoutUrl.

Applications must respond to this request by clearing any session that identifies the user and returning a 200 response. If you want to support single sign-out in your application, you must implement a LogoutUrl in your application's code.

这称为单点退出". 请参考 https://docs.microsoft.com/zh-CN/azure/active-directory-b2c/session-overview#single-sign-out

This is called single sign out . Please refer to https://docs.microsoft.com/en-us/azure/active-directory-b2c/session-overview#single-sign-out