Exchange 2010 AADAP publishing - not logging off / custom logoff url?

[Peter Holland]

Hi,

Another AADAP query.

I've noticed that if publishing Exchange 2010 OWA through AADAP (Azure AD Application Proxy) that the logout doesnt log you out.

I believe this is down to the fact that Exchange 2010 uses the legacy logoff url of /OWA/logoff.owa instead of the modern /owa/auth/logoff.aspx, so AADAP doesnt recognise a request for logoff.owa as a logout request, maintaining the authenticated session, allowing the user to just browse back into their mailbox.

With shared computers/kiosk systems this is obviously an issue.

is there any way to specify the logoff url within AADAP, or could logoff.owa be added to the default logout request URLs?

the only thing i have found online references a deprecated configuration item.

(although, now i have said that,  havent actually dropped in to powershell to see if there is a setting that isnt surfaced through the UI, which i will now go and do..)

[#2]

ok, so, the answer is.....

drop to powershell

using get-azureadapplications the app has a property of logoffurl.. assuming that isnt deprecated then i'm assuming setting that will indeed perform the required configuration :)

[#3]

also, the setting is "LogoutUrl" not logoffurl

[#4]

also...
initial testing implies that doesn't do anything, possibly as the service is IWA/KCD rather than openID as per this article:
https://azure.microsoft.com/en-us/resources/samples/active-directory-dotnet-webapp-openidconnect/?v=...