Repository navigation
User session limiter added but user getting logout on Browser reload #15918
Replies: 2 comments 6 replies
|
Hi Sebastian, Many thanks for your help much appreciated. You have guided perfectly. It is working as expected. Will test more and report any further issues being faced. Regards, |
|
Hi @samir-kamble can you please share the auth flow setup which is working? because i tried the same but still its not working and its logs out the user on both new and older sessions (different browsers). Here is the setup screenshot - |
|
Follow above setup. It works well. |
|
You cannot have required and alternative authenticators at the same level. All of your top-level authenticators must be alternative or disabled. You can switch "Copy of browser forms" to alternative and remove the user session count limiter on the top level because new sessions will only be created after the username password form. You should set the session count limiter there to required. |
Hi Thanks for Quick response, I tried your suggested config. It gave me following error on login page |
|
Cookie and Copy of Browser Forms must be set to alternative. |
|
I have created following flow. Is it correct? As I am getting 400 Bad request on refreshing page and Token is not getting generated. |
|
The user session count limiter should only be after the Username Password form, not after the Cookie (because the latter does not create a session). |
Uh oh!
There was an error while loading. Please reload this page.
Hi All,
Thanks for this wonderful marvel. I am trying to setup User session delimiter on Keycloak version 18. I have done everything as per guidelines mentioned on following link
https://www.keycloak.org/docs/latest/server_admin/index.html#_user_session_limits
Also, setup everything correctly. Referred following thread for setting up various possible options in configurations.
#10077
Multiple session are working correctly. But when I reload browser. I get login screen back. But When I see my session in keycloak admin it is still there it is not killed.
Note: I am using AD authentication
Attaching screenshot of my configuration. Please help.
All reactions