I have a SPA on Blazor that is already migrated to B2C and login/logout functionality works fine.
I also created and run a SignUp_SignIn custom policy according to this MSDN article and everything seems to work fine. After the session is expired, if I open a new browser tab, I am prompted to login again.
However, if I open my application, successfully log in into it via B2C, wait a configured amount of time and after the session time is expired it does not automatically logs me out and redirects to the login page.
So, the question is: Should automatic logout after session expiry be implemented on the application side or should I add any additional configuration to my custom policy?