Hi,
I wonder whether the topic of Session Management will be covered by the
OIDC certification
https://issues.jboss.org/browse/KEYCLOAK-524
I'm asking this question because there is an issue with single logout in
mod_aut_openidc:
According to the main mod_aut_openidc project's contributor Hans Zandbelt the
implementation in Keycloak "is not an implementation of OpenID Connect's
Session Management. Looking at the spec:
http://openid.net/specs/openid-connect-session-1_0.html#OPiframe..."
<
http://openid.net/specs/openid-connect-session-1_0.html#OPiframe>
Details can be found in
https://github.com/pingidentity/mod_auth_openidc/issues/175
Best regards
Valerij