All registered admin URLs should be notified, if I recall. Does each client have an admin URL configured in the Keycloak console? On Tue, Sep 29, 2015 at 9:45 AM, Kalinga Dissanayake <kalinga(a)leapset.com&gt; wrote:

I cant get this to work. Any one who implemented central logout via keycloak? Regards, Kalinga -----Original Message----- From: "Kalinga Dissanayake" <kalinga(a)leapset.com&gt; Sent: Tuesday, September 29, 2015 9:50pm To: "Bob McWhirter" <bmcwhirt(a)redhat.com&gt; Cc: &quot;keycloak-user(a)lists.jboss.org&quot; <keycloak-user(a)lists.jboss.org&gt; Subject: Re: [keycloak-user] Implementing central logout Yes. Is that all I should do? I have done that but I receive no notification. Regards, Kalinga -----Original Message----- From: "Bob McWhirter" <bmcwhirt(a)redhat.com&gt; Sent: Tuesday, September 29, 2015 7:25pm To: "Kalinga Dissanayake" <kalinga(a)leapset.com&gt; Cc: &quot;keycloak-user(a)lists.jboss.org&quot; <keycloak-user(a)lists.jboss.org&gt; Subject: Re: [keycloak-user] Implementing central logout All registered admin URLs should be notified, if I recall. Does each client have an admin URL configured in the Keycloak console? On Tue, Sep 29, 2015 at 9:45 AM, Kalinga Dissanayake <[ kalinga(a)leapset.com ]( mailto:kalinga@leapset.com )> wrote: My scenario is this; I have two clients configured on keycloak and I have two client applications relying on keycloak for SSO and user management. Both of my client applications are using the tomcat adapter. Currently if the user signs out from the first client the second client is not notified. I need this to be fixed, so that when a user signs out from one client, the other client is notified, so the latter can forcefully logout the user. How can I handle this on keycloak? I tried the Admin Url configuration given on the docs [ http://docs.jboss.org/keycloak/docs/1.2.0.Beta1/userguide/html_single/ind... ]( http://docs.jboss.org/keycloak/docs/1.2.0.Beta1/userguide/html_single/ind... ) but I did not see a way forward. My current version of keycloak is 1.2.0. But I can upgrade to 1.5.0 if its required. Regards, Kalinga _______________________________________________ keycloak-user mailing list [ keycloak-user(a)lists.jboss.org ]( mailto:keycloak-user@lists.jboss.org ) [ https://lists.jboss.org/mailman/listinfo/keycloak-user ]( https://lists.jboss.org/mailman/listinfo/keycloak-user )

guys, Thanks for the tips. Went through the request and the code as well and realized that when retrieving the access code we need to send the state parameters which we didnt send. These are the two parameters I added; client_session_state={client_session_state}&client_session_host={client_session_host} After fixing this, we got a demo working. Will play around more. Thanks again. Regards, Kalinga -----Original Message----- From: "Sebastian Rose" <sebastian.rose(a)aoe.com&gt; Sent: Wednesday, September 30, 2015 9:59pm To: "Kalinga Dissanayake" <kalinga(a)leapset.com&gt;, "Bob McWhirter" <bmcwhirt(a)redhat.com&gt;, &quot;keycloak-user(a)lists.jboss.org&quot; <keycloak-user(a)lists.jboss.org&gt; Subject: AW: [keycloak-user] Implementing central logout Yes, we have, everything works fine with the admin url (we do not use the tomcat adapter, but this should not change a thing). There are calls to the configured admin URL with k_logout. Maybe check your admin-url again, or have a look at the wire? Regards, Sebastian Von: keycloak-user-bounces(a)lists.jboss.org [mailto:keycloak-user-bounces@lists.jboss.org] Im Auftrag von Kalinga Dissanayake Gesendet: Mittwoch, 30. September 2015 15:30 An: Bob McWhirter; keycloak-user(a)lists.jboss.org Betreff: Re: [keycloak-user] Implementing central logout I cant get this to work. Any one who implemented central logout via keycloak? Regards, Kalinga -----Original Message----- From: "Kalinga Dissanayake" <[ kalinga(a)leapset.com ]( mailto:kalinga@leapset.com )> Sent: Tuesday, September 29, 2015 9:50pm To: "Bob McWhirter" <[ bmcwhirt(a)redhat.com ]( mailto:bmcwhirt@redhat.com )> Cc: "[ keycloak-user(a)lists.jboss.org ]( mailto:keycloak-user@lists.jboss.org )" <[ keycloak-user(a)lists.jboss.org ]( mailto:keycloak-user@lists.jboss.org )> Subject: Re: [keycloak-user] Implementing central logout Yes. Is that all I should do? I have done that but I receive no notification. Regards, Kalinga -----Original Message----- From: "Bob McWhirter" <[ bmcwhirt(a)redhat.com ]( mailto:bmcwhirt@redhat.com )> Sent: Tuesday, September 29, 2015 7:25pm To: "Kalinga Dissanayake" <[ kalinga(a)leapset.com ]( mailto:kalinga@leapset.com )> Cc: "[ keycloak-user(a)lists.jboss.org ]( mailto:keycloak-user@lists.jboss.org )" <[ keycloak-user(a)lists.jboss.org ]( mailto:keycloak-user@lists.jboss.org )> Subject: Re: [keycloak-user] Implementing central logout All registered admin URLs should be notified, if I recall. Does each client have an admin URL configured in the Keycloak console? On Tue, Sep 29, 2015 at 9:45 AM, Kalinga Dissanayake <[ kalinga(a)leapset.com ]( mailto:kalinga@leapset.com )> wrote: My scenario is this; I have two clients configured on keycloak and I have two client applications relying on keycloak for SSO and user management. Both of my client applications are using the tomcat adapter. Currently if the user signs out from the first client the second client is not notified. I need this to be fixed, so that when a user signs out from one client, the other client is notified, so the latter can forcefully logout the user. How can I handle this on keycloak? I tried the Admin Url configuration given on the docs [ http://docs.jboss.org/keycloak/docs/1.2.0.Beta1/userguide/html_single/ind... ]( http://docs.jboss.org/keycloak/docs/1.2.0.Beta1/userguide/html_single/ind... ) but I did not see a way forward. My current version of keycloak is 1.2.0. But I can upgrade to 1.5.0 if its required. Regards, Kalinga _______________________________________________ keycloak-user mailing list [ keycloak-user(a)lists.jboss.org ]( mailto:keycloak-user@lists.jboss.org ) [ https://lists.jboss.org/mailman/listinfo/keycloak-user ]( https://lists.jboss.org/mailman/listinfo/keycloak-user )