Forum Discussion

Peter Holland's avatar
Peter Holland
Iron Contributor
Jun 14, 2017

Exchange 2010 AADAP publishing - not logging off / custom logoff url?

Hi,

 

Another AADAP query.

I've noticed that if publishing Exchange 2010 OWA through AADAP (Azure AD Application Proxy) that the logout doesnt log you out.

I believe this is down to the fact that Exchange 2010 uses the legacy logoff url of /OWA/logoff.owa instead of the modern /owa/auth/logoff.aspx, so AADAP doesnt recognise a request for logoff.owa as a logout request, maintaining the authenticated session, allowing the user to just browse back into their mailbox.

 

With shared computers/kiosk systems this is obviously an issue.

 

is there any way to specify the logoff url within AADAP, or could logoff.owa be added to the default logout request URLs?

 

the only thing i have found online references a deprecated configuration item.

(although, now i have said that,  havent actually dropped in to powershell to see if there is a setting that isnt surfaced through the UI, which i will now go and do..)

 

 

App Services
azure

3 Replies

  • Peter Holland's avatar
    Peter Holland
    Iron Contributor
    Jun 14, 2017

    ok, so, the answer is.....

    drop to powershell

     

    using get-azureadapplications the app has a property of logoffurl.. assuming that isnt deprecated then i'm assuming setting that will indeed perform the required configuration :)

      • Peter Holland's avatar
        Peter Holland
        Iron Contributor
        Jun 15, 2017
        also...
        initial testing implies that doesn't do anything, possibly as the service is IWA/KCD rather than openID as per this article:
        https://azure.microsoft.com/en-us/resources/samples/active-directory-dotnet-webapp-openidconnect/?v=17.23h