How to achieve Single Sign-Out in Keycloak/Spring based applications?

Question

I have 2 Spring web-apps. I'm using Keycloak to protect them. In Keycloak doc it's said that to logout i can use:

HttpServletRequest.logout()

Yes, it loges out user from one app. But the second one still remains active. How to configure Keycloak and/or Spring to provide Single Sign Out?

Answer 1

If you're using the Spring Security adapter use the /sso/logout endpoint instead (either in GET or POST). For instance:

http://myapplication/sso/logout