Azure AD B2c automatice session timeout not happening

2022-02-03T17:02:26.697+00:00

I have React Application which is using Azure AD B2C to authenticate users. The session configuration in the Azure portal is set to expire within 15min. But after 15 min the session does not expire at all.

My testing process:

I login using Azure AD B2C login page, after successful login the user will be redirected to homepage. Where I leave the page inactive for 15min and after that I refresh the page, instead of logout due to session inactivity. The app remain active.

Expected Behaviour:

The session should automatically expire after 15min of inactivity and should take the user to Azure login page.

Actual Behaviour:

Application does not timeout after 15 mins inactive period it still continue to navigate between pages

Find below the configurations:

171102-image.png

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,887 questions
{count} votes

9 answers

Sort by: Most helpful
  1. Rafael Caviquioli 20 Reputation points
    2023-04-19T15:44:12.37+00:00

    I have the same problem here, first I thought I was misunderstanding the concept of Web app session lifetime (minutes), and maybe I still am. I tried using standard user flows, but also custom policy. I tried Absolute / Rolling, neither signs out the user after 15 minutes. Does anyone have any update on this?

    0 comments No comments

  2. Jitendra Shah 0 Reputation points
    2023-08-24T16:52:14.55+00:00

    I am facing the same problem. Did we find any splution to this?

    0 comments No comments

  3. Samer Abud 5 Reputation points
    2024-04-01T07:30:01.6866667+00:00

    So years after posting this question, correct answer is not provided my Microsoft. What a shame!

    Has anyone manage to figure it out?

    0 comments No comments

  4. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.