VRB13 SSO login - how to logout?

[PospiKM]

Hello,

have you ever faced following situation?

I used the SSO login (Entra ID as identity provider) for VBR13 console, checked to remember my session, everything OK and smooth till the point that I would like to logout my SSO session from the VBR console because it's saved/cached somewhere and anyone can basically maintain the server now under my own account.. I could not find any technical documentation regarding such stuff.

Any ideas how to proceed?

Thank you.
Tom

[Mildur]

Hi Tom,

I ran a short test and can confirm that the “Sign Out” button only signs you out of our "application session", not the "SSO session". By clicking on "Sign-In with SSO", you start a new session for the "application" with the already sign-in user account.

The purpose of Single Sign-On is to sign in once and use multiple applications where you have permissions assigned.
Providing a logout button for Single Sign Out in the Backup Server Web UI might be useful, but it would also log you out of all other applications (such as Outlook, Teams, or other Microsoft 365 products) using the same SSO session on that machine — until you sign in again. Are you using different machines for Microsoft 365 apps and for managing the backup server?

because it's saved/cached somewhere and anyone can basically maintain the server now under my own account..

If someone gains access to your Windows session (or your personal local user account) where you have the SSO session active, then yes.
I believe you can use Entra ID to configure session lifetimes and also periodic reauthentication, which should help mitigate this scenario:
https://learn.microsoft.com/en-us/entra/identity/conditional-access/howto-conditional-access-session-lifetime

Best,
Fabian