Secure Your ASP.NET Web Forms Application with OpenID Connect and Okta

Bin Sun

I followed this tutorial. It seems to have one issue - The logout is not working properly. Although the about page shows the user is not authenticated after logout, click login does not prompt user for user name and password. There are some hints suggested to add OpenIdConnectAuthenticationDefaults.AuthenticationType as a parameter to Signout method. Then I get 400 bad request error complaining invalid id token (actually the id_token_hint cannot be found in the signout request to Okta server).