Search code examples
azure-active-directoryazure-ad-b2cazure-ad-b2c-custom-policy

Why does Azure AD B2C auto sign-in after sign-up/reset password?

In my .NET 6 Razor Pages web application, sign-in, sign-out, sign-up, and reset password policies are working fine.

But after successful execution of a policy journey, say sign-up or reset password, the web app's User.Identity.IsAuthenticated remains true and it shows as the user is logged in and I have to manually click sign-out in the page to sign-out the user.

Can anyone please help on this issue?

I have the default configuration in my program.cs file for MicrosoftIdentityWebAppAuthentication.

Solution

  • This is the default behaviour.

    You are signed in until either the session expires or you manually sign out.