When clearing remote session of okta using /logout endpoint, it is not removing all the active sessions for the user. Endpoint I used ${issuer}/oauth2/v1/logout?id_token_hint=${idToken}` user A has logged in to 2 applications secured by Okta using single sign on feature. Now, IF user A do logout …

[image] [OIDC] Logout without having the original Id Token? OAuth/OIDC you can redirect user to “{{your_okta_org}}/login/signout?fromURI={{one of the trusted origins}}”

Sorry didn’t get your point. How this redirect will help? i have gone through this https://developer.okta.com/docs/guides/sign-users-out/react/sign-out-of-okta/ but it didn’t help me out

Ok, so let me take it back and ask you first: how is your session for application B handled? are you able to confirm, that after signing out of A your browser session to Okta is terminated?

The logout endpoint will only end the user’s session within the same browser they are redirected. If you are looking to end sessions across other browsers, you can make a back-end call to the Users endpoint to delete all of a given user’s active sessions, including the option to revoke all issued a…

In the documentation, there is a note that says it does not apply for web sign-in. So don’t end sessions across other browsers, correct? If it is correct, is there another way to do this? " Note: This operation doesn’t clear the sessions created for web sign in or native applications."

I also faced the problem. When I logout SLO, it was logout, but when I login , it still login from session. how should I do it?

This is an old thread but deserves an answer: Currently the API does not offer a way to list all the sessions a user may have open. There are two ways that can clear all the user’s sessions though: The easy but ugly way is to use the API to suspend and then un-suspend the user. Suspending a user c…

Clear all the active session for a particular user on logout

Questions OAuth/OIDC

phi1ipp April 20, 2020, 7:11pm 2

Post		Replies	Views
Single logout across multiple appilications Questions	5	4162	September 12, 2022
Single logout doesn't logout from other applications OAuth/OIDC	2	2656	July 22, 2022
Which API call should use to clear session from ALL applications. (OIDC Application) OAuth/OIDC	2	2972	April 11, 2023
Clear User Sessions is not clearing id tokens i.e. user's Okta sessions, only clearing access token and refresh token Questions	1	5585	March 22, 2020
Is it possible to do force logout without id_token_hint OAuth/OIDC	1	5663	May 4, 2022

Clear all the active session for a particular user on logout

Related topics