MSAL Angular v2: Logout with ID Token

Core Library

@azure/msal-browser

Core Library Version

2.14.1

Wrapper Library

@azure/msal-angular

Wrapper Library Version

2.0.0-beta.5

Description

In Azure AD B2C, one can enable the option to require the ID Token for logouts. This option does not seem to be supported out of the box by the MSAL Angular (v2) wrapper.

Are there any plans to support this feature before coming out of beta? I probably could include the ID token myself, if I replicate the whole MSAL Angular Interceptor logic where the acquireTokenSilent() call is made, but looking at the code it looks a bit cumbersome. The EndSessionRequest looks like it already supports the idTokenHint.

MSAL Configuration

No response

Relevant Code Snippets

logout(): Observable<void> {
  return this.msal.logout({idTokenHint: "missing-token-here"});
}

Identity Provider

Azure B2C Basic Policy

Source

External (Customer)

[jasonnutter]

#5036 will expose the raw id token, which applications can pass to the logout APIs if desired (the library will not automatically include it as id_token_hint if an account is passed).

[svrooij]

We are using this code to logout, and it picks up the id token in the logout request (I always assumed at least):

// Select account you want to signout, first one in this case
var account = this.msal.instance.getAllAccounts()[0];
// Unset active account (we are using multiple accounts in our app, not sure if this is needed in your case).
this.msal.instance.setActiveAccount(undefined);
// Signout (with account set)
this.msal.instance.logout({ account: account, postLogoutRedirectUri: '...' });