| While in the Open ID connect specs it's recommended to use the ID Token in the logout request, in the Microsoft v2.0 protocol, the ID Token hint is not needed for sign out. Adding it may actually cause logout errors to the users like:
AADSTS90015 Requested query string is too long.
I suggest adding a new configuration option that allows the user to skip the id_toke_hint from the logout request. |
