I got the link to how to configure the Single Sign-On, Also we have configured it successfully and It is working for me.
I followed the below link to configure the SSO.
How Mastodon Configured Login Using SSO
The problem is that although the Mastodon Server login successfully, when signing out, the Sign In page appears but logging in again with SSO does not prompt for the Email ID and password, resulting in a direct login.
I am using the Mastodon Server 4.2.10
and for SSO using Azure AD
I am expecting when we did logout from the server again login then ask email id and password
I tried below scenarios:
Scenario 1:
OIDC_ENABLED=true
OIDC_DISPLAY_NAME="Reactiveworks"
OIDC_ISSUER=https://login.microsoftonline.com/<tenant id>/v2.0
OIDC_DISCOVERY=true
OIDC_SCOPE="openid,profile,email,offline_access"
OIDC_UID_FIELD=preferred_username
OIDC_REDIRECT_URI=https://mastodon.com/auth/auth/openid_connect/callback
OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED=true
OIDC_CLIENT_ID=<client_ID>
OIDC_CLIENT_SECRET=<Client_Secret>
OIDC_IDP_LOGOUT_REDIRECT_URI=https://mastodon.com/auth/sign_out
OIDC_END_SESSION_ENDPOINT=https://login.microsoftonline.com/<tenant id>/oauth2/v2.0/logout
Same OIDC_IDP_LOGOUT_REDIRECT_URI configured on Azure AD but Not working
Scenario 2:
OIDC_ENABLED=true
OIDC_DISPLAY_NAME="Reactiveworks"
OIDC_ISSUER=https://login.microsoftonline.com/<tenant id>/v2.0
OIDC_DISCOVERY=false
OIDC_AUTH_ENDPOINT=https://login.microsoftonline.com/<tenant id>/oauth2/v2.0/authorize
OIDC_TOKEN_ENDPOINT=https://login.microsoftonline.com/<tenant id>/oauth2/v2.0/token
OIDC_USER_INFO_ENDPOINT=https://graph.microsoft.com/oidc/userinfo
OIDC_JWKS_URI=https://login.microsoftonline.com/<tenant id>/discovery/v2.0/keys
OIDC_SCOPE="openid,profile,email,offline_access"
OIDC_UID_FIELD=preferred_username
OIDC_REDIRECT_URI=https://mastodon.com/auth/auth/openid_connect/callback
OIDC_SECURITY_ASSUME_EMAIL_IS_VERIFIED=true
OIDC_CLIENT_ID=<client_ID>
OIDC_CLIENT_SECRET=<Client_Secret>
OIDC_IDP_LOGOUT_REDIRECT_URI=https://mastodon.com/auth/sign_out
OIDC_END_SESSION_ENDPOINT=https://login.microsoftonline.com/<tenant id>/oauth2/v2.0/logout
It is not working
please guide me how to configure the Single Sign Out with azure Ad (Step By Step)
Thank You