0Pricing
OAuth2 & OpenID Connect Deep Dive · Lesson

Session Management

Explore different OIDC session management techniques, including front-channel and back-channel logout, to keep user sessions synchronized.

Keeping Sessions in Sync

In OpenID Connect (OIDC), users often interact with multiple applications (Relying Parties) through a single identity provider (OP).

When a user logs out from one service, they usually expect to be logged out from all connected services. This is where OIDC Session Management comes in!

The Distributed Session Challenge

Imagine you log into Google, then use Google Login for YouTube and Gmail. If you log out of YouTube, should you still be logged into Gmail?

Synchronizing session status across different applications and the identity provider is a complex challenge in distributed systems.

All lessons in this course

  1. Dynamic Client Registration
  2. OIDC Discovery Endpoint
  3. Session Management
  4. Claims Request and aggregated Claims
← Back to OAuth2 & OpenID Connect Deep Dive