Does not redirect to my webapp after signout (with Gmail - Azure Ad account)

Nguyen Thai Son (FHN.BU9) 16

I'm using Azure AD to sign-in/sign-out my webapp (using Msal 2.0). But the sign-out function does not redirect back to my app's login page after sign-out for my Gmail - Azure Ad account (it works for my company domain - azure AD account which is fpt.com). I found that be cause the v2 logout endpoint that Msal 2.0 used does not work for Gmail type account (https://login.microsoftonline.com/{tenant}/oauth2/v2.0/logout?post_logout_redirect_uri=http://localhost:3000/). It does work if I use v1 endpoint (https://login.microsoftonline.com/{tenant}/oauth2/logout?post_logout_redirect_uri=http://localhost:3000/). Please tell me what should I do?
Beside, after logout, the token (logged out) still valid? Is this correct case? (Im using Msal to validate the token).

Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,461 Reputation points

2020-11-09T21:03:13.897+00:00

Hello @Nguyen Thai Son (FHN.BU9) , is the Gmail account a personal (Microsoft) account or a federated one?
James Hamil 24,666 Reputation points Microsoft Employee

2020-11-09T21:35:46.263+00:00

Hi, can you show me a screenshot of the settings you're using for this? Or if you're following any documentation?
Nguyen Thai Son (FHN.BU9) 16 Reputation points

2020-11-10T01:54:49.723+00:00

Yes the Gmail is my personal account, it works correctly for other account (my company account).
Nguyen Thai Son (FHN.BU9) 16 Reputation points

2020-11-10T01:56:28.857+00:00

Sorry, which setting your want to see? This is my config in the code to use Msal:
const msalConfig = {
auth: {
clientId: CLIENT_ID,
authority: 'https://login.microsoftonline.com/' + TENANT_ID,
redirectUri: 'http://localhost:3000'
},
cache: {
cacheLocation: 'sessionStorage',
storeAuthStateInCookie: false
},
system: {
loggerOptions: {
loggerCallback: (level, message, containsPii) => {
if (containsPii) {
return
}
switch (level) {
case msal.LogLevel.Error:
console.error(message)
return
case msal.LogLevel.Info:
console.info(message)
return
case msal.LogLevel.Verbose:
console.debug(message)
return
case msal.LogLevel.Warning:
console.warn(message)
}
}
}
}
}
Nguyen Thai Son (FHN.BU9) 16 Reputation points

2020-11-11T03:11:34.407+00:00

Any help please?
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,461 Reputation points

2020-11-11T19:04:36.423+00:00

Have you tried with authority: 'https://login.microsoftonline.com/common' ?
Nguyen Thai Son (FHN.BU9) 16 Reputation points

2020-11-12T04:12:17.31+00:00

This is work:
https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=http://localhost:3000/
https://login.microsoftonline.com/{tenantid}/oauth2/logout?post_logout_redirect_uri=http://localhost:3000/
but this is not work (with v2.0):
https://login.microsoftonline.com/common/oauth2/v2.0/logout?post_logout_redirect_uri=http://localhost:3000/
https://login.microsoftonline.com/{tenantid}/oauth2/v2.0/logout?post_logout_redirect_uri=http://localhost:3000/

Does the first-twos are correct way? Because I'm using Msal v2.0.
James Hamil 24,666 Reputation points Microsoft Employee

2020-11-26T00:28:43.257+00:00

Hi, do you still require assistance?

Thank you,
James
Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,461 Reputation points

2020-11-30T21:53:29.667+00:00

@Nguyen Thai Son (FHN.BU9) the first 2 are ok but the last 2 should work. Have you tried setting authority in MSAL config as 'https://login.microsoftonline.com/common'?

Share via

Does not redirect to my webapp after signout (with Gmail - Azure Ad account)

Your answer