# Backchannel Logout event shouldn't be sent to the client that triggers the logout action

**URL:** <https://forum.keycloak.org/t/backchannel-logout-event-shouldnt-be-sent-to-the-client-that-triggers-the-logout-action/7293>\
**Category:** Securing applications\
**Created:** [February 10, 2021, 11:43am UTC](https://forum.keycloak.org/t/backchannel-logout-event-shouldnt-be-sent-to-the-client-that-triggers-the-logout-action/7293 "2021-02-10T11:43:24Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![archerbj](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/archerbj/32/1865_2.png) [@archerbj](https://forum.keycloak.org/u/archerbj)\
**Post date:** [February 10, 2021, 11:43am UTC](https://forum.keycloak.org/t/backchannel-logout-event-shouldnt-be-sent-to-the-client-that-triggers-the-logout-action/7293/1 "2021-02-10T11:43:24Z")

</div>

Keyclaok: 12.0.2

As we know backchannel logout is to implement SLO. And keycloak 12.x already supports it.  
But I found, the logout event is abused.

1.I have a client A that registers a backchannel logout URL  
2.Client A trigger a logout action with user refresh token and client\_id  
http:///auth/realms/master/protocol/openid-connect/logout  
3.Client also receives a logout token

This is wired to me. IMHO, the backchannel logout URL is more like a passive handler to it possible to know a user has logged out from another application in the SSO system.

And “you” should log out too. I am not sure if I am right about this? could someone help me out?