[Mr444-dev]

Summary

Expands the WS-Federation API docs to explain that wsignoutcleanup1.0 requests aren't signed or session-bound, that requests reaching RemoteSignOutPath can trigger local sign-out, and how to disable the endpoint or filter requests in OnRemoteSignOut.

The event example rejects missing Referer headers and warns that request headers are metadata rather than cryptographic authentication. It also calls out provider-specific delivery and SameSite cookie behavior.

The companion tutorial update is in dotnet/AspNetCore.Docs#37907.

Addresses #69635.

Validation

• git diff --check.
• The targeted project build could not be completed locally: this checkout pins .NET SDK 11.0.100-rc.1.26420.103, while the machine has SDKs 7.0.401 and 10.0.401. The sparse checkout also lacks the generated build props from the repository restore step.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[dotnet-policy-service]

Thanks for your PR, @Mr444-dev. Someone from the team will get assigned to your PR shortly and we'll get it reviewed.

[Mr444-dev]

@dotnet-policy-service agree

[dotnet-policy-service]

Looks like this PR hasn't been active for some time and the codebase could have been changed in the meantime.
To make sure no conflicting changes have occurred, please rerun validation before merging. You can do this by leaving an /azp run comment here (requires commit rights), or by simply closing and reopening.

[Mr444-dev]

/azp run

[azure-pipelines]

Commenter does not have sufficient privileges for PR 69860 in repo dotnet/aspnetcore