SAML: Idp initiated sign out on Azure AD user deletion?

Question

Not sure how to go about the following scenario:

User logs in with SAML using in an Azure enterprise configured application.

User authenticated succesfully. If user now logs out from Azure -> I can catch this event using the logout url.

However if the user is deleted / removed from the organisation the user is still logged in in my application.

I've implemented similar logic with Oauth and refresh tokens, didn't find an equivalent using SAML.

Answer 1

As of now there is no support in SAML for the user provisioning events performed by the Idp.

In Azure enterprise configured application there is feature for Automate user provisioning and deprovisioning to applications which ensure that the identities in your app and systems are kept up to date based on changes in the directory or your human resources system.

For more information you can refer this link