[keycloak-user] Problem: We're sorry ...You are already authenticated as different user

[Marco de Luca]

Scenario:

We are using keycloak OIDC to create id-token/UserInfo för our applications. IdP is provided by an external SAML IdP.  

We want Keycloak to provide SSO between all applications (clients) using the Keycloak server (3.4.1).

 

Problem:

When the first application “A” uses Keycloak to authenticate the user everything is OK. When application “B” (using the same  browser) uses Keycloak to authenticate the user an error occurs. “We're sorry ...You are already authenticated as different user ‘xx' in this session. Please logout first.” (DIFFERENT_USER_AUTHENTICATED)

 The current configuration uses the IdP “Subject.NameID” as username (preferred_username).

-- 
Marco