Terminate user Sessions

Forum
1

Hello everyone,

I have the following problem.

We have a Keycloak to define global roles for users. Users log in to Cumulocity via SSO.
Session configuration in Keycloak:
SSO Session Settings:

  • SSO Session Idle: 30 Minutes
  • SSO Session Max: 10 Hours
    Access tokens:
  • Access Token Lifespan: 15 Minutes

Problem:
When we change a user’s global role, the logged-in user does not receive the new role until they log out and log back in.

How can I delete the session or log the user out?
Can I perhaps do this via a microservice?
Unfortunately, I cannot use this API because I do not know the user’s cookie:

Can anyone help me with the best way to update a user’s rights?

Thank you.
David

2

I see this feature:

I set this backchannel and i see the audit log, but it is not working:

grafik
grafik642×112 3.1 KB

What could be the reason for this?