且构网

分享程序员开发的那些事...
且构网 - 分享程序员编程开发的那些事

Azure AD B2C - 从所有会话中注销用户

更新时间:2023-12-02 13:42:40

我可能会迟到.但如果这有帮助的话.交流到文档

I might be late. But if that helps. A.c to docs

当您将用户重定向到 Azure AD B2C 注销终结点(适用于 OAuth2 和 SAML 协议)时,Azure AD B2C 会从浏览器中清除用户的会话.但是,用户可能仍会登录到使用 Azure AD B2C 进行身份验证的其他应用程序.为了使这些应用程序能够同时将用户注销,Azure AD B2C 向用户当前登录的所有应用程序的已注册 LogoutUrl 发送 HTTP GET 请求.

When you redirect the user to the Azure AD B2C sign-out endpoint (for both OAuth2 and SAML protocols), Azure AD B2C clears the user's session from the browser. However, the user might still be signed in to other applications that use Azure AD B2C for authentication. To enable those applications to sign the user out simultaneously, Azure AD B2C sends an HTTP GET request to the registered LogoutUrl of all the applications that the user is currently signed in to.

应用程序必须通过清除任何标识用户的会话并返回 200 响应来响应此请求.如果您想在应用程序中支持单点注销,则必须在应用程序代码中实现 LogoutUrl.

Applications must respond to this request by clearing any session that identifies the user and returning a 200 response. If you want to support single sign-out in your application, you must implement a LogoutUrl in your application's code.

这称为单点注销.请参考 https:///docs.microsoft.com/en-us/azure/active-directory-b2c/session-overview#single-sign-out

This is called single sign out . Please refer to https://docs.microsoft.com/en-us/azure/active-directory-b2c/session-overview#single-sign-out