tp2pv (tp2pv) asked a question.
Sending the login email address in the SAML for an Authorization Request.
I am rather new to this, so I apologize if this is an obvious question.
We have a web application that uses SSO, and it works ok. The problem we're having is that if the user signs out of our app, and a new user signs in using the same system, the Okta authentication flow provisions the first user's credentials.
Is there a way to send in the email address of the user attempting to sign into our app in the first Authorization Request, so that Okta will request the credentials if the email address is not the same as the previously signed-in user?
Thanks for any help!
Hello @tp2pv (tp2pv) Thank you for reacting out to our Community!
The reason for this might be the fact that the user still has an active Okta session. In this case on thing that might help would be implementing Single Log Out, this way when a user logs out of the application they will also terminate the Okta session thus forcing the new user to authenticate into Okta with the proper info.
Please see our doc on Single Log out
https://help.okta.com/en-us/Content/Topics/Apps/Apps_Single_Logout.htm
Community members help others by clicking Like or Select as Best on responses. Try it today.