<div dir="ltr">We don't have support for this at the moment and would like to do it at some point. It would mainly be a matter of adding the authentication time to the token as well as implementing support for prompt=login (see <a href="http://openid.net/specs/openid-connect-implicit-1_0.html#rfc.section.2.1.1.1">http://openid.net/specs/openid-connect-implicit-1_0.html#rfc.section.2.1.1.1</a>).<br><div><br></div><div>You could probably achieve the same with a custom authentication flow and a custom protocol mapper that adds the authentication time to the token.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On 8 April 2016 at 01:35, Richard Lavallee <span dir="ltr"><<a href="mailto:rllavallee@hotmail.com" target="_blank">rllavallee@hotmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div dir="ltr">Does anyone know the answer to this?<div><br></div><div>I want to setup up a Keycloak SSO for, say, five apps: only one of which is required (by U.S. State Law) to become logged out upon ten inactive minutes timeout. </div><div>How can I achieve this in Keycloak?</div><div><br></div><div>So for example: user signs in to Keycloak and begins working in APP1 then switches to APP2 and stays there for more than ten minutes. User re-visits APP1 which has been idle for more than ten minutes. By law he needs to re-authenticate to APP1 even though he remains already authenticated in Keycloak. How to force re-authentication for at least APP1?</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>-Richard</div><div><br></div><div><br></div><div><br></div> </font></span></div></div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>