Should backchannel logout be invoked when a session is logged out from the Admin Console

35 views
Skip to first unread message

Brian Levine

unread,
Jul 30, 2021, 7:18:09 PM7/30/21
to Keycloak User

Hi,

In experimenting with Keycloak 12.0.4, I've noticed that the backchannel logout URL of a client is not invoked if the the session is forcibly logged out from the Admin Console (e.g., when using the Logout All button in the Sessions tab.  Is this correct behavior?  Is backchannel logout invoked only when a client hits the end_session_endpoint?

I did notice that the admin API (k_logout) is invoked in this case.

Thanks!

Brian

Reply all
Reply to author
Forward
0 new messages