[keycloak-user] SSO with multiple domains

[Dmitry Telegin]

Hi Ushanas,

Out of the box, client applications do not have any mechanism to determine if the user has logged out.
But you can implement it using the so called "iframe trick". More info here: https://www.keycloak.org/docs/latest/securing_apps/index.html#openid-connect-vs-saml

Cheers,
Dmitry Telegin
CTO, Acutus s.r.o.
Keycloak Consulting and Training

Pod lipami street 339/52, 130 00 Prague 3, Czech Republic
+42 (022) 888-30-71
E-mail: info at acutus.pro

On Thu, 2018-07-26 at 04:06 +0530, Ushanas Shastri wrote:
> Hello,
> 
> We have 4 different applications, hosted on 3 unique servers.  All
> applications are protected by KeyCloak. All apps are built on AngularJS.
> 
>  In cases where we have multiple tabs open (one for each application) in
> Chrome.
> 
> When users logout from one Tab, the other tabs don't always logout. Post
> this, applications that we login to keep getting unauthorized, and I assume
> that the tokens have been invalidated.
> 
> I've tried version 3.0 and 3.2.1.
> 
> I'm looking for any guidance and best practices to handle such cases.
> 
> 
> 
> Regards, Ushanas.
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user