Citrix Secure Developer Spaces™

Microsoft Azure Configuration as Identity Provider (OIDC)

August 28, 2025

Contributed by:

The platform supports integration with Azure Active Directory for logging in with your Microsoft Azure account. To configure it:

Go to the Microsoft Azure portal.
Navigate to the Azure Active Directory.

MS 1

Click on “App registrations” and then “New registration”. Set the following:
App name: Choose a name that will be publicly visible to users logging into the platform.
Supported account types: We recommend selecting “Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g., Skype, Xbox)” to allow registered users to log in with their public domain accounts.
Redirect URI: Set the selector to “Web” and enter a URI similar to https://example.com/oauth/callback.

MS 2

Click on “Register” at the bottom.
On the next page, note the OAuth Client ID for the platform configuration.

MS 3

To obtain the secret, go to “Certificates & secrets” of the newly created app and click on “New client secret”. Enter this secret in the platform configuration to complete the setup.

Single Logout (SLO) for Microsoft Azure

To enable Single Logout for the OIDC flow with Azure, configure the following:

To log out users from Microsoft when they log out of the Strong Network™ platform, add another URL in the Redirect URI section with just the domain name used by the Strong Network platform. This URL is used to redirect users back after they log out of their Microsoft accounts.
Add the optional claim called “login_hint” to the ID token:
Go to “Token configuration” and click on “Add optional claim”.
Select ID as token type and then select “login_hint”.
To log the user out of the Strong Network platform when they log out of their Microsoft account, add the optional claim called “sid” to the ID token type.
Add a Logout URL under the “Authentication” menu with the structure https://[domain_name]/auth/logout, where domain_name is the domain under which you have the Strong Network platform. This endpoint will be called by Microsoft when a user logs out to also log out the user from the Strong Network platform.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Microsoft Azure Configuration as Identity Provider (OIDC)

August 28, 2025

Contributed by:

August 28, 2025

Contributed by:

Microsoft Azure Configuration as Identity Provider (OIDC)

Single Logout (SLO) for Microsoft Azure

In this article