# Keycloak js doesn\`t logout user from external open id provider

**URL:** <https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435>\
**Category:** Getting advice\
**Created:** [December 16, 2020, 2:11pm UTC](https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435 "2020-12-16T14:11:43Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![DmitriyVorobey](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dmitriyvorobey/32/1601_2.png) [@DmitriyVorobey](https://forum.keycloak.org/u/DmitriyVorobey)\
**Post date:** [December 16, 2020, 2:11pm UTC](https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435/1 "2020-12-16T14:11:43Z")

</div>

Hello there,

I am trying to logout user via keycloak js from the client application and it doesn`t work.  
My setup:  
Client Application (OpenId) \<- Keycloak \<- External OpenId Idp.  
keycloak-js version: 11.0.2.

I see that keycloak js redirects the user to the logout endpoint when keycloak.logout() called. Logout endpoint: [http://localhost:8001/auth/realms/click/protocol/openid-connect/logout?redirect\_uri=http%3A%2F%2Fclick.iam.com%3A8002%2F](http://localhost:8001/auth/realms/click/protocol/openid-connect/logout?redirect_uri=http%3A%2F%2Fclick.iam.com%3A8002%2F). But, the user session is still active after the refresh.  
I see similar complaints on stack overflow: [https://stackoverflow.com/questions/49190827/keycloak-logout-does-not-end-session](https://stackoverflow.com/questions/49190827/keycloak-logout-does-not-end-session).

---

<div class="post-metadata">

**Author:** ![DmitriyVorobey](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dmitriyvorobey/32/1601_2.png) [@DmitriyVorobey](https://forum.keycloak.org/u/DmitriyVorobey)\
**Post date:** [December 16, 2020, 4:16pm UTC](https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435/2 "2020-12-16T16:16:31Z")

</div>

After some investigation, I found that the Keycloak session removes after logout. But the session on external IDP is still alive. So, after page reload Keycloak’s session recreates.

---

<div class="post-metadata">

**Author:** ![Kalithasanp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/kalithasanp/32/2958_2.png) [@Kalithasanp](https://forum.keycloak.org/u/Kalithasanp)\
**Post date:** [May 26, 2021, 2:18pm UTC](https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435/3 "2021-05-26T14:18:24Z")

</div>

I am also facing same issue. any fix or any workaround there ?

---

<div class="post-metadata">

**Author:** ![DmitriyVorobey](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dmitriyvorobey/32/1601_2.png) [@DmitriyVorobey](https://forum.keycloak.org/u/DmitriyVorobey)\
**Post date:** [May 26, 2021, 3:09pm UTC](https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435/4 "2021-05-26T15:09:47Z")

</div>

The problem was that the realm names in keycloak and in keycloak js were slightly different. In keycloak it was uppercase and in keycloak js we used lowercase.

---

<div class="post-metadata">

**Author:** ![Kalithasanp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/kalithasanp/32/2958_2.png) [@Kalithasanp](https://forum.keycloak.org/u/Kalithasanp)\
**Post date:** [May 27, 2021, 2:09am UTC](https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435/5 "2021-05-27T02:09:58Z")

</div>

I am using keycloak 12.0.4 and spring boot adapter. I have verified realm names. it is lower case in both keycloak and my property file. but , still it is not logging out external IDP.

any workaround there ?

my external idp is Okta with openid protocol

---

<div class="post-metadata">

**Author:** ![DmitriyVorobey](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/dmitriyvorobey/32/1601_2.png) [@DmitriyVorobey](https://forum.keycloak.org/u/DmitriyVorobey)\
**Post date:** [May 27, 2021, 7:01am UTC](https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435/6 "2021-05-27T07:01:00Z")

</div>

I would suggest to inpect the network tab in chrome. Potentially keycloak might logout you, but single logout is not configured, so in okta you are still login. So, keycloak renew session.

---

<div class="post-metadata">

**Author:** ![Kalithasanp](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/kalithasanp/32/2958_2.png) [@Kalithasanp](https://forum.keycloak.org/u/Kalithasanp)\
**Post date:** [May 27, 2021, 8:55am UTC](https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435/7 "2021-05-27T08:55:02Z")

</div>

Yes @DmitriyVorobey , Keycloak gets logout. but it is not getting logout from okta.

 ![image](https://global.discourse-cdn.com/free1/uploads/keycloak/original/2X/7/7b1300eb4754846cdcc6cedc65d882d03e092251.png)

I have configured external idp’s logout url also. please point me if I did configure anything wrong.

and , I am using spring boot adapter for keycloak.  
I have triggered logout from backend , by `request.logout();`

if you have any reference, please share to me, that will help me.  
Thanks you

---

<div class="post-metadata">

**Author:** ![Mahdigolbaz](https://yyz2.discourse-cdn.com/free1/user_avatar/forum.keycloak.org/mahdigolbaz/32/3541_2.png) [@Mahdigolbaz](https://forum.keycloak.org/u/Mahdigolbaz)\
**Post date:** [July 15, 2021, 10:20am UTC](https://forum.keycloak.org/t/keycloak-js-doesn-t-logout-user-from-external-open-id-provider/6435/8 "2021-07-15T10:20:25Z")

</div>

hey  
i have the same problem. is there any solution?