Repository navigation
I want a user to get logged in instead of being shown "different user is already authenticated. Please log out first" #42602
|
In tab1, user A logs in to his account. Then, in tab2, user B tries to log in, but keycloak shows "different user is already authenticated" error. Instead of this error, I want that user A gets logged out and user B gets logged in without the error being shown. I am open to using a custom SPI (already using Post-login flow SPIs). Any help will be appreciated. Thank you. |
Replies: 1 comment 1 reply
|
Easy peasy here, just follow the open standards. OpenID Connect [1] has a standard parameter, |
|
Thank you for the reply. We are making use of offline sessions, so the session in keycloak server is only active between issuing the authorization code and token (or 5 minutes). We were facing this issue when UserA gets the code in tab 1 and UserB also gets the code in tab 2 before User A manages to issue a token. That is when we were getting the "different user authenticated" error. Our desired solution will be that both users are able to issue their token without the error page or overriding the previous user's session (I'm assuming prompt=login does that). Will this be possible? Thank you for your time. |
Easy peasy here, just follow the open standards. OpenID Connect [1] has a standard parameter,
prompt, that you can specify in the authentication request with the valuelogin(for example:authorize?prompt=login,{other-params}) . This forces a login, no matter if you already have an existing session in the IdP.[1] https://openid.net/specs/openid-connect-core-1_0.html