Azure / Azure/api-management-developer-portal

Developer Portal to set up Sign Out with OAUTH

Open
#1,068 38 comments 3 reactions 0 assignees View on GitHub
(t) Improvement (u) AAD + AAD B2C P1
Dominant language
TypeScript
Stars
545
Forks
360
PR merge metrics
No merged PRs in 30d

Description

**Insight:** We enabled developer portal user sign in with OAUTH.
Azure active directory is our IDP & this is updated in identities in APIM.
Developer portal is registered as client in AAD.

We are using Sign in with OAUTH function.
The sign in works as expected with OAUTH.

``
**Issue** is with sign out process.
There is no option to Sign out with OAUTH currently provisioned.

Hence we are using standard Signout function.

This is only enabling our users to sign out from their Developer portal session.
This does not allow AAD session to be logged out.
SO when user signs back in, it does not redirect them to go through login process, it just signs right back in.
This is a security vulnerability & does not comply with our security requirements for 2FA.

We raised case with Microsoft.
After reviewing our request, Microsoft Product Group recommended to request as open issue on GITHUB.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.