<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00007rpacGCAQOkta Classic EngineSingle Sign-OnAnswered2024-04-15T12:38:17.000Z2022-07-28T17:28:57.000Z2022-07-29T17:11:47.000Z

6iwh6 (6iwh6) asked a question.

Cannot stop automatic authentication for Google IdP users

I have 2 kinds of users: manually added and the remote users received from the Google identity provider.

This is my authentication URL:

https://dev-7398107.okta.com/oauth2/default/v1/authorize?client_id=0oa5ot7txtQ730Z4i5d7&prompt=login&login_hint=someuser@gmail.com&response_type=token&scope=openid+email+profile&nonce=1111111&state=111111&redirect_uri=http%3A%2F%2Flocalhost%3A5000%2Fredirect.html

 

When I set the `login_hint` to a local user the flow behaves correct, but when I set it to the gmail user it automatically logs in to some other gmail user that has been logged in before and returns me its access_token.

 

Cleaning browser cookies doesn't help.

Manually clearing session in "Clear User Sessions" in Directory>People>logged_user doesn't help.

 


  • Paul S. (Okta, Inc.)

    Hello @6iwh6 (6iwh6)​ Thank you for reacting out to our Community!

     

    At this time this is expected behaviour as the user has an existing Session on Gmail. This session can not be terminated from Okta's end, this session should be terminated from the User's side before trying this, if you want the app to do it, users have to clear the Google session themselves.

     

    My advice would be to leverage the Okta Developer forums for this type of questions and take advantage of their expertise.

    https://devforum.okta.com/

     

    Hope this helps and if this answered your question, please mark this as Best Answer!

    Expand Post
This question is closed.
Loading
Cannot stop automatic authentication for Google IdP users