Ok.
LogoutAll at the Realm level from admin console will set a
realm.notBefore policy to now. This will force a relogin for everybody.
LogutAll at the user level creates a notBefore policy for the individual
user.
On 3/12/2014 2:55 PM, Bill Burke wrote:
Ya know. They way it works is kinda silly. A Logout should
probably
set a notBefore policy too.
On 3/12/2014 2:02 PM, Bill Burke wrote:
>
>
> On 3/12/2014 12:46 PM, Stian Thorgersen wrote:
>> It's really nice to see logged in users, and to be able to manage sessions
through the admin console. I've spotted a few issues though:
>>
>> * Logout All (realm/sessions) or Logout specific user (realm/applications/app)
doesn't seem to work - only thing I could do to actually logout a user was to set the
not before
>> * Users/sessions for users logged in to admin console or account doesn't
work
>
> View the wildfly console. You *are* being logged out, but your identity
> token is still active so when you get redirected to recreate the totem,
> you get relogged in. The logout button in admin console can't change
> the user's cookies.
>
> Maybe instead of logout call it "Invalidate SEssion" or "Logout
Session"?
>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev(a)lists.jboss.org
>>
https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com