I saw this answer and update (Revocation endpoint in Azure AD B2C) but I'm not sure how to use this with Azure AD B2C. I've opened up an Azure Cloud Shell and it comes back that the object ID does not exist. I'm running this from my parent Azure directory because I could not open up an Azure Cloud Shell inside my Azure AD B2C directory (it said "No valid subscription found"). Do you have to run this command from within the Azure AD B2C directory? If so how do I link a subscription so that I can do this?
可以将文章内容翻译成中文,广告屏蔽插件可能会导致该功能失效(如失效,请关闭广告屏蔽插件后再试):
问题:
回答1:
I don't believe you can use Azure Cloud Shell because an Azure AD B2C directory isn't related to an Azure subscription like an Azure AD directory is related to one.
You can use either:
- The Revoke-AzureADUserAllRefreshToken cmdlet of the Azure Active Directory PowerShell for Graph module.
- The Invalidate all refresh tokens for a user operation of the Azure Active Directory Graph API.