AzureAD Sign out bindings

Question

Does Azure AD supports HTTP-POST ? I can see HTP-Redirect is used in metadata but need to confirm if HTTP-POST can be used as well. Some applications may have hard dependency on HTTP-Post and unless it is supported by AzureAD, sign out on those apps wont work.

Answer 1

@IdentityQ-6734, Azure AD implements the SAML 2.0 web browser single sign-out profile. As part of the single sign-out flow the browser will be redirected (HTTP Redirect) to this url, so it is not possible to configure this call to be only a POST. This article provides a detailed description of the single sign-out flow in Azure AD, and for more info about the SAML 2.0 web browser single sign-out profile you can refer to the specification here.

Answer 2

@IdentityQ-6734, Ideally the following http bindings are available by default in Azure AD metadata

 <SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/c2d4955e-81d6-xxx-8388-68xxxxxxe8dc243/saml2"/>
 <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://login.microsoftonline.com/c2d4955e-81d6-xxx-8388-68xxxxxxe8dc243/saml2"/>
 <SingleSignOnService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://login.microsoftonline.com/c2d4955e-81d6-xxx-8388-68xxxxxxe8dc243/saml2"/>

I am not seeing HTTP-POST for SingleLogoutService. I would request you to allow me sometime to check on this and will get back to you in sometime.