#40403·keycloak

Produce 'Logout' event in event listener provider when 'SSO Session Max' is reached

Author: lrozenblyumCreated Jun 11, 2025Updated Sep 17, 2026
Labelsarea/authenticationkind/enhancementhelp wantedteam/core-clients

Description

We'd like to get a `Logout' event in the event listener provider when 'SSO Session Max' is reached so that the app can react to this Keycloak session expiration properly.

Currently we don't get this event.

Discussion

No response

Motivation

For example a Spring Security app with Standard flow executes authentication in Keycloak just during logging in (see https://github.com/spring-projects/spring-security/issues/6742) so it heavily relies on the logout events from Keycloak to be able to invalidate the local authentication session.

We have a custom extension that implements org.keycloak.events.EventListenerProviderFactory and listens to Events (of type LOGOUT) and Admin events (of type DELETE/USER_SESSION) and neither of them fires in case of SSO Session Max expiration

Details

No response