[keycloak-user] Problem: We're sorry ...You are already authenticated as different user

Scenario: We are using keycloak OIDC to create id-token/UserInfo för our applications. IdP is provided by an external SAML IdP. We want Keycloak to provide SSO between all applications (clients) using the Keycloak server (3.4.1). Problem: When the first application “A” uses Keycloak to authenticate the user everything is OK. When application “B” (using the same browser) uses Keycloak to authenticate the user an error occurs. “We're sorry ...You are already authenticated as different user ‘xx' in this session. Please logout first.” (DIFFERENT_USER_AUTHENTICATED) The current configuration uses the IdP “Subject.NameID” as username (preferred_username). -- Marco