Azure / Azure/api-management-developer-portal
Developer Portal to set up Sign Out with OAUTH
- Dominant language
- TypeScript
- Stars
- 545
- Forks
- 360
- PR merge metrics
- No merged PRs in 30d
Description
**Insight:** We enabled developer portal user sign in with OAUTH.
Azure active directory is our IDP & this is updated in identities in APIM.
Developer portal is registered as client in AAD.
We are using Sign in with OAUTH function.
The sign in works as expected with OAUTH.
``
**Issue** is with sign out process.
There is no option to Sign out with OAUTH currently provisioned.
Hence we are using standard Signout function.
This is only enabling our users to sign out from their Developer portal session.
This does not allow AAD session to be logged out.
SO when user signs back in, it does not redirect them to go through login process, it just signs right back in.
This is a security vulnerability & does not comply with our security requirements for 2FA.
We raised case with Microsoft.
After reviewing our request, Microsoft Product Group recommended to request as open issue on GITHUB.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.