Logout of WordPress AND Active Directory?

[tmann50]

Hi,

I have just started using this plugin, it’s really good apart for one thing which I have noticed...
When you try to log out of the Wordpress site, you are either taken back to the admin dashboard or told that you have logged out of Wordpress (which you haven’t because you are still logged in - you can navigate back to the dashboard without re-authenticating).

I think that this is because when you ‘log out’ of WP, you still do not log out of the Azure AD. An option to make this happen would be v. useful. For example, volunteers in my organisation use their organisation accounts to login to Wordpress, but use other Office 365 accounts for work - for example, and this can make signing out tricky.
if users Explicitly want to log out of WordPress, then pressing the logout button should log them out of Azure as well.

I know not everyone will be keen on this idea, but having it a a configurable option would be good. If for now this cannot happen, then if there are a few lines of code (in the logout or plugin scripts) that could do this for me perhaps someone could tell me what and and where to put it?

Sorry for my lengthy question/explanation, I am not that good when it comes to website coding and stuff...

Thanks

[psignoret]

Thanks for this great feedback! This is something that I would like to add as a configuration option relatively soon.

(Duplicate of #163.)

[tmann50]

Thanks @psignoret ! Do you know of anywhere I can find the code that does this (to put into my installation) in the meantime?

[bradkovach]

Ending a session of another service is not something that should be done carelessly. For some tenants, this would log users out of their email/OneDrive/etc, which is certainly not a thoughtful approach. The plugin has a Sign Out link on the wp-login page that will initiate a global Azure AD signout. Maybe just make it say "Sign out of $display_name$" for clarity.

edit: can't wrap text in angle brackets in markdown

[psignoret]

Actually, triggering a full logout of the identity provider is more often than not the typical behavior. Though of course, this wouldn't be done carelessly. :)

[psignoret]

@tmann50 If you update to the latest version, you'll see a new option in the plugin settings to trigger a full Azure AD logout (when the user actually signed in with Azure AD).

[tmann50]

@psignoret Thank you! 👍👍