How to bypass account selection when application logs out in azure app service using asp.net core

Question

How to bypass account selection when application logs out in azure app service using asp.net core

Jagmohan Singh Salaria 0

We have implemented the application logging out feature when user idle time gets over. However, on logging out we are getting account selection popup window which we want bypass and application logs out itself completely. We are using angular and asp.net core .

sample signout code in controller

return SignOut(new AuthenticationProperties {

     RedirectUri = "sampleLog"

 },

 CookieAuthenticationDefaults.AuthenticationScheme,

 OpenIdConnectDefaults.AuthenticationScheme);

AgaveJoe 30,126 Reputation points

2024-07-16T11:58:35.3666667+00:00

You did not shared any of the client code. You have to understand, that we have no idea how the idle timeout logic works, what a "selection popup window" is or how it is invoked, or what application logs you are referring to.

Try debugging the Agular application.
Anonymous

2024-07-17T06:42:06.6333333+00:00

Could you please tell me which authentication you have used? Microsoft Entra ID or else?
Jagmohan Singh Salaria 0 Reputation points

2024-07-18T06:39:56.37+00:00

Brando Zhang-MSFT - its Microsoft Entra ID
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2024-07-24T05:56:11.6166667+00:00

Hi Jagmohan Singh Salaria,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know. Thanks,

1 answer

Your answer

AgaveJoe 30,126 Reputation points

2024-07-16T11:58:35.3666667+00:00

You did not shared any of the client code. You have to understand, that we have no idea how the idle timeout logic works, what a "selection popup window" is or how it is invoked, or what application logs you are referring to.

Try debugging the Agular application.
Anonymous

2024-07-17T06:42:06.6333333+00:00

Could you please tell me which authentication you have used? Microsoft Entra ID or else?
Jagmohan Singh Salaria 0 Reputation points

2024-07-18T06:39:56.37+00:00

Brando Zhang-MSFT - its Microsoft Entra ID
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2024-07-24T05:56:11.6166667+00:00

Hi Jagmohan Singh Salaria,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know. Thanks,

Answer 1

Shweta Mathur 30,296 Microsoft Employee Moderator

Hi Jagmohan Singh Salaria,

Thanks for reaching out.

It seems like you are using ASP.NET Core and OpenID Connect for authentication. The account selection popup window appears when there are multiple accounts signed in.

To bypass this window and log out completely, you can add the prompt=none parameter to the logout request. This parameter tells the identity provider to not display any user interaction, and to fail the request if the user is not already authenticated.

Here's an example of how you can modify your signout code to include the prompt=none parameter:

return SignOut(new AuthenticationProperties 
{ RedirectUri = "sampleLog",
 Parameters =
 {
 { "prompt", "none" } 
}
 }, 
CookieAuthenticationDefaults.AuthenticationScheme, OpenIdConnectDefaults.AuthenticationScheme);

This should log out the user completely without displaying the account selection popup window.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.

Jagmohan Singh Salaria 0 Reputation points

2024-08-27T15:37:07.9133333+00:00
Thanks Shweta Mathur

I have added the recommended code but it still asking for choosing the account for logging out.

Use case - we have set the user idle timeout say 5 secs and if user didn't perform any activity in application, then we are making a call from angular to Web Api for signing out from the application

Below is angular code for checking the idle timeout-

checkUserIdleTime(idle) {

**idle.setIdle(60);** **idle.setTimeout(5);** **idle.setInterrupts(DEFAULT_INTERRUPTSOURCES);** **idle.onTimeout.subscribe(() => {** **window.location.href = '/apiController/signout';** **});**

}

Below is Web API code:-

[Route("SignOut")]

[HttpGet]

public IActionResult SignOut()

{

**string callbackUrl = "sampleLogOut/";** **return SignOut(new AuthenticationProperties** **{** **RedirectUri = callbackUrl,** **Parameters =** **{** **{ "prompt", "none" }** **}** **},** **CookieAuthenticationDefaults.AuthenticationScheme,** **OpenIdConnectDefaults.AuthenticationScheme);**

}

Share via

How to bypass account selection when application logs out in azure app service using asp.net core

1 answer

Your answer