Azure Active Directory skip account selection on logout

ONLINECAST

2 min read

·

06-10-2024

10

0

Share

Bypassing Account Selection: Streamlining Azure AD Logout

Tired of the endless account selection pop-up after logging out of your Azure AD application? This common frustration can disrupt your workflow and add unnecessary steps. Fortunately, there's a way to skip this step and make logout smoother.

The Problem:

Azure Active Directory (Azure AD) typically displays a user account selection screen upon logout. This screen forces you to choose the account you want to sign out of, even if you are only logged in to one account. This can be tedious and time-consuming, especially if you frequently switch between different accounts.

The Solution:

The key to bypassing account selection lies in the postLogoutRedirectUri parameter in your Azure AD application configuration. By setting this parameter, you can redirect the user to a specific URL after they log out, effectively skipping the account selection step.

Here's how it works:

1. Azure AD App Registration: Navigate to your Azure AD app registration in the Azure portal.
2. Authentication: Under the 'Authentication' section, find the 'Advanced settings' link and click it.
3. Post Logout Redirect URI: Add a new "Post Logout Redirect URI" by entering the URL where you want to redirect the user after logout. This can be your application's homepage or any other relevant URL.
4. Save Changes: Make sure to save the changes you've made to the application settings.

Code Example (using JavaScript):

// Function to initiate logout
function logout() {
    // Construct the logout URL using your application's ID and the configured post logout redirect URI.
    var logoutUrl = "https://login.microsoftonline.com/" + yourTenantId + "/oauth2/v2.0/logout?post_logout_redirect_uri=" + yourPostLogoutRedirectUri;

    // Redirect the user to the logout URL
    window.location.href = logoutUrl;
}

Important Considerations:

• Tenant ID: Replace yourTenantId with your Azure AD tenant's ID.
• Post Logout Redirect URI: Replace yourPostLogoutRedirectUri with the URL you configured in the Azure AD application settings.

Further Optimization:

• For a seamless user experience, you can set the post_logout_redirect_uri parameter within your logout request itself, instead of relying on the Azure AD application settings.
• Consider using a JavaScript library like adal-angular or msal.js to manage authentication and logout operations within your application.

Benefits:

• Improved User Experience: Streamline the logout process, minimizing user frustration and saving time.
• Enhanced Security: By directly redirecting users after logout, you reduce the risk of accidental access to sensitive data.

Conclusion:

By understanding and utilizing the postLogoutRedirectUri parameter, you can effectively bypass account selection after logout, making your Azure AD application more user-friendly and secure. This simple configuration can significantly enhance the user experience and improve overall application efficiency.