Sign users out of Okta

Sign users out of Okta by ending their session on the Okta Authorization Server.

Open the controller where you handle the sign-out process and update the SignOut action. This time you need to also sign the user out of the Okta OIDC middleware with OktaDefaults.MvcAuthenticationType:

public class AccountController : Controller
{
    [HttpPost]
    public ActionResult SignOut()
    {
        if (HttpContext.User.Identity.IsAuthenticated)
        {
            HttpContext.GetOwinContext().Authentication.SignOut(
                CookieAuthenticationDefaults.AuthenticationType,
                OktaDefaults.MvcAuthenticationType);
        }

        return RedirectToAction("Index", "Home");
    }
}

Update your using statements to import the following namespaces:

using Microsoft.Owin.Security.Cookies;
using Okta.AspNet;

After you sign users out of your app and out of Okta, you have to redirect users to a specific location in your application. You need to whitelist the post sign-out URL in your Okta application settings.

Open the Okta Developer Console:

Go to Console

Select Applications, and then pick your application.
Select General and click Edit.
Add the post sign-out URL in the Logout redirect URI field (for example, http://localhost:3000/account/postsignout).
Click Save.

Then, you have to modify the Okta configuration in your application to also include the Logout redirect URI. Open the Startup.cs file and update the Configuration method to include PostLogoutRedirectUri in the Okta configuration:

public class Startup
{
    public void Configuration(IAppBuilder app)
    {
        //...
        app.UseOktaMvc(new OktaMvcOptions()
        {
            //...
            PostLogoutRedirectUri = "http://localhost:3000/Account/PostSignOut",
        });
    }
}

Finally, add the desired logic for the post sign-out callback. Open the controller where you handle the sign-out process and add a PostSignOut method:

public class AccountController : Controller
{
    public ActionResult PostSignOut()
    {
        // Return to the home page after sign out
        return RedirectToAction("Index", "Home");
    }
}

Next steps

Sign users out of Okta

On This Page