When a user is uses the forgot password and resets their password and there is a clientId
then they are redirected to the appropriate client only when they initiate the forgot
password and complete the reset password in the same browser. We have noticed that
Keycloak does not honor the clientId request parameter when the KC_RESTART token is not
present (for example the user initiated the forgot password in one browser and completes
the reset in another). Is there a work around to allow Keycloak to honor the clientId
passed in even when the cookie is not present?
Show replies by date