Problems with logout in KC

[MarcelloT]

I created a test realm with two clients (oidc). When I log in to client1, I can then access client2 without logging in. In keycloak, I see the active session for my user with both clients. When I log out on one of the two clients, the session is automatically closed in kc. The problem is that the other client remains logged in. I think it’s more correct for the user to be kicked out of the client. If so, how should this be implemented? Perhaps the problem is that the client is still using the token? Thanks

[dasniko]

You already got the relevant links regarding logout in this answer:

SSO problems and doubts

Keep things simple. Forget about iframes and implement standard federation with OIDC using the Authorization Code flow with PKCE. Then, for logout, there are several options depending on the user experience and the type of application you have. OIDC RP-Initiated Logout [1] OIDC Back-Channel Logout [2] [1] Final: OpenID Connect RP-Initiated Logout 1.0 [2] Final: OpenID Connect Back-Channel Logout 1.0