Share via

How to detect when a user revokes Microsoft OAuth app access or ends their sessions

AnotherUserHere1337 0 Reputation points
2025-08-12T18:52:39.4+00:00

I have several Azure Entra ID OAuth apps using the User.Read scope to authenticate users in my custom web app. Users are linked by the sub claim in the Microsoft ID token. I want a webhook or notification when a user revokes access/removes permissions to my OAuth app in their Microsoft account or ends all their active sessions, so I can force re-authentication.

For Google Sign-In, I found this question that points to Google RISC, where Google sends security event notifications to a custom endpoint. I tried looking for something similar for Microsoft but could not find anything.

Please help me or point me to documentation on how to implement this, or confirm if Microsoft simply does not provide this feature.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments
Accepted answer
  1. Swaroop Kolli 3,505 Reputation points Microsoft External Staff Moderator
    2025-08-13T00:29:54.8233333+00:00

    Hello @AnotherUserHere1337

    Unfortunately, Microsoft does not currently offer an exact analog to Google RISC or a native webhook that triggers when a user removes your app’s permissions or if user ends the application session.

    Microsoft Graph webhooks can notify you about changes to certain resources (users, groups, messages, etc.) but unfortunately, not on app permissions and user token revocation.

    Event Type Supported via Event Grid? Notes
    User created/updated Yes Event: Microsoft.Graph.UserUpdated
    User created/updated Yes Event: Microsoft.Graph.UserUpdated
    User deleted Yes Event: Microsoft.Graph.UserDeleted
    Group created/updated Yes Event: Microsoft.Graph.GroupUpdated
    Group deleted Yes Event: Microsoft.Graph.GroupDeleted
    Audit logs / sign-ins No Not publishable through Event Grid
    Application events No Not supported as Microsoft Entra change events

    https://docs.azure.cn/en-us/event-grid/

    https://learn.microsoft.com/en-us/azure/event-grid/microsoft-entra-events

    If this answered your question, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.