Questions tagged [back-channel]

3 questions
5
votes
1 answer

OIDC Backchannel logout, how to kill browser session of a user from REST call in a JEE Application

We are using Keycloak as a SSO provider to login in all our application. We are using the keycloak logout endpoint to logout at a realm level and invalidate the access tokens of the user. Our issue is, if a user was connected on websiteA and…
amdev
  • 3,010
  • 3
  • 35
  • 47
0
votes
0 answers

Keycloak OIDC backchannel logout multiple sessions on same client

While testing the backchannel logout of our OIDC client implementation, I noticed the following behavior in Keycloak when multiple sessions exist. Preconditions: Log in the user in the same client using, e.g., two browsers. You will see two sessions…
oliverguenther
  • 1,167
  • 1
  • 17
  • 31
0
votes
0 answers

Keycloak backchannel logout in clustered application

I have a JavaEE application deployed in Payara application cluster with more than two nodes. Application uses Keycloak servlet adapter to enable integration with Keycloak. I have Keycloak 11.0 deployed in production with domain clustered mode. I…
Amit P
  • 467
  • 6
  • 20