Hi
I am developing an iPhone mobile application and I want to be able to authenticate my user using AAD.
I started using auth0 and I was able to accomplish almost everything I wanted. I am using a refresh token and I was expecting it to be revoked when the user changes is password or when the user was deleted from active directory. From my investigation and the questions I asked to auth0, it does not work and there is no way for them to know that the user has changed his password.
If I was using AAD authentication without auth0, would my refresh token be revoked when the user changes his password?
Also I would like to know if there is a way to control the content of the AAD login page. We would like to be able to remove the following links:"Keep me login" and the "Can't access your account?"
Thank you