Redirecting to different application after timing out

Get Help
,
1

Greetings, I’ve listed the steps below to recreate this issue – I don’t know if a solution is in place to ensure that redirects remain committed for the target application…If you have a pathway to correcting this issue, I would love to implement it.

  1. I had been logged in to CompanyApp, which timed out and went to the log in screen.
  2. I clicked Sign In, and the Sign In page re-loaded.
  3. I started the recording.
  4. I clicked in the Personal Email field just to ensure you could see my clicks, but I did not change anything.
  5. I clicked Sign In again.
  6. The app navigates to NewApp and gives me a 403 Forbidden error.

We also have video of this behavior if we can send that privately to someone on the team.

3

Hi @dwood1,

Welcome back to the Auth0 Community!

The reason why you might be getting this behavior is because when logging out of an application it will generally redirect to the first URL from the Allowed Logout URLs List ( see Allowed Logout URLs List Not Returning the Correct Value ).

Redirects can be set accordingly after a user signs in or signs out of an application.

  1. After a user signs is, you will have to make sure that the redirect_uri parameter is used properly as a callback URL. For this you can check out the Redirect Users after login documentation.

  2. You can also implement a returnTo URL query string parameter. Our documentation on the matter - Redirect Users with Alternative Logout mentions that you can redirect users to a specific URL.

You can check out this community articles about this:

I hope this helps, and if you have further questions please let me know.
Best regards,
Remus