Azure Logout redirect URL as http instead of https

Question

We have developed a desktop application using ElectronJS and React. In here we have used Azure AD B2C for authentication using the msal.js npm package. ElectronJS on successful build will run on the file protocol method. But Azure AD B2C does not support file protocol(file://somepath/some). So only other option is, while running in production we have created a server locally with some specific port and in that case Redirect URLs for Sign In , Sign up and forgot password workflows , we have used the localhost with port number which we would have created when the app runs. Example http://localhost:18090. Everything is working fine, except for Logout. But the problem is Logout URLs does not support 'http' URLs, as it throws me a error to enter only https URL.

Please suggest is there any other way we can proceed in case of Logout using http://localhost.

Answer 1

Hello @ShruthiM-6084

The new App registrations experience doesn't allow adding URIs with HTTP scheme on the UI. As a workaround, you may try setting the HTTP url for the logoutURL parameter in App Manifest as highlighted below:

On the UI that you have shared in your comment, you will still get The logout URL must start with HTTPS message but the URL will be saved. If you use below PowerShell Cmdlet to view properties of the application, you will see the HTTP URL set as the logout url.

---

Please do not forget to "Accept the answer" wherever the information provided helps you. This will help others in the community as well.

Answer 2

http://localhost:* can be used as both login and logout redirect url. Please share your full logout URL.

Answer 3

same issue here

Answer 4

Any update on this matter ?

Answer 5

I have the same issue. Editing the manifest does not work either since it checks that you have entered an HTTPS address.

On the Authentication page under Redirect URIs, it says:

The URIs we will accept as destinations when returning authentication responses (tokens) after successfully authenticating or signing out users.

Is this where the logout URI should be, alongside the login URI? I tried that but it does not seem to work. And if I try to enter my logout URI where it says Front-channel logout URL, I can't enter an HTTP address.