MSALSignoutParameters

Objective-C

@interface MSALSignoutParameters : MSALParameters

/**
 A copy of the configuration which was provided in the initializer.
 */
@property (nonatomic, readonly, copy) MSALWebviewParameters *webviewParameters;

/**
  Specifies whether signout should also open the browser and send a network request to the end_session_endpoint.
  NO by default.
 */
@property (nonatomic) BOOL signoutFromBrowser;

/*
  Removes account from the keychain with either com.microsoft.adalcache shared group by default or the one provided when configuring MSALPublicClientApplication.

  This is a destructive action and will remove the SSO state from all apps sharing the same cache!
  It's intended to be used only as a way to achieve GDPR compliance and make sure all user artifacts are cleaned on user sign out.
  It's not intended to be used as a way to reset or fix token cache.
  Please make sure end user is shown UI and/or warning before this flag gets set to YES.
  NO by default.
*/
@property (nonatomic) BOOL wipeAccount;

/*
  When flag is set, following should happen:
    - Wipe all known universal cache locations regardless of the clientId, account etc. Should include all tokens and metadata for any cloud.
    - Wipe all known legacy ADAL cache locations regardless of the clientId, account etc.
    - MSALWipeCacheForAllAccountsConfig contains a list of additional locations for partner caches to be wiped (e.g. Teams, VisualStudio etc). Wipe operation should wipe out all those additional locations. This file includes "display identifier" of the location (e.g. Teams cache), and precise identifiers like kSecAttrAccount, kSecAttrService etc.
    - If SSO extension is present, call SSO extension wipe operation. Wipe operation should only be allowed to the privileged applications like Intune CP on macOS or Authenticator on iOS.
    - Failing any of the steps should return error back to the app including exact locations and apps that failed to be cleared.
  NO by default.
  This is a dangerous operation.
*/
@property (nonatomic) BOOL wipeCacheForAllAccounts;

/**
 Initialize MSALSignoutParameters with web parameters.
 
 @param webviewParameters   User Interface configuration that MSAL uses when getting a token interactively or authorizing an end user.
 */
- (instancetype)initWithWebviewParameters:(MSALWebviewParameters *)webviewParameters;

@end

Swift

class MSALSignoutParameters : MSALParameters

Undocumented

  • A copy of the configuration which was provided in the initializer.

    Declaration

    Objective-C

    @property (nonatomic, copy, readonly) MSALWebviewParameters *_Nonnull webviewParameters;

    Swift

    @NSCopying var webviewParameters: MSALWebviewParameters { get }

  • Specifies whether signout should also open the browser and send a network request to the end_session_endpoint. NO by default.

    Declaration

    Objective-C

    @property (nonatomic) BOOL signoutFromBrowser;

    Swift

    var signoutFromBrowser: Bool { get set }

  • Undocumented

    Declaration

    Objective-C

    @property (nonatomic) BOOL wipeAccount

    Swift

    var wipeAccount: Bool { get set }

  • Undocumented

    Declaration

    Objective-C

    @property (nonatomic) BOOL wipeCacheForAllAccounts

    Swift

    var wipeCacheForAllAccounts: Bool { get set }

  • Initialize MSALSignoutParameters with web parameters.

    Declaration

    Objective-C

    - (nonnull instancetype)initWithWebviewParameters:
    (nonnull MSALWebviewParameters *)webviewParameters;

    Swift

    init(webviewParameters: MSALWebviewParameters)

    Parameters

    webviewParameters

    User Interface configuration that MSAL uses when getting a token interactively or authorizing an end user.