Access token not getting invalidated after logout in Azure Active Directory B2C

Solution:- Access tokens cannot be revoked and are valid until their expiry and hence the only option is to reduce the lifespan of the access token to very minimum (for e.g. 10 minutes)

Refer Microsoft Document: Configurable token lifetimes – Microsoft Entra | Microsoft Docs

Add Comment