<html><body><div>Hi all,</div><div><br></div><div>I would like to use kerberos as my standard authentication mechanism, but I also want to have the possibility to log in as an admin over the login form. </div><div>Therefore, I want to skip the kerberos authenticator after a successful logout.</div><div><a href="https://issues.jboss.org/browse/KEYCLOAK-1727">https://issues.jboss.org/browse/KEYCLOAK-1727</a></div><div><br></div><div>How would you solve this problem?</div><div><br></div><div>I've got two solutions, one sets a logout session cookie after a logout and then skips the kerberos authentication and another which allows users to skip any kind of alternative authenticators with a query parameter.</div><div><br></div><div>Logout Session Cookie</div><div><a href="https://github.com/gerbermichi/keycloak/commit/f804d9e13573cb666cf6d2eff1407978c9e5e854">https://github.com/gerbermichi/keycloak/commit/f804d9e13573cb666cf6d2eff1407978c9e5e854</a></div><div><br></div><div>Query Param</div><div><a href="https://github.com/gerbermichi/keycloak/commit/abd3bd87f5aa4c28914da677653268c0f44fe6cc">https://github.com/gerbermichi/keycloak/commit/abd3bd87f5aa4c28914da677653268c0f44fe6cc</a></div><div><br></div><div>Michael</div></body></html>