# Opal UI logout does not trigger openID logout (e.g. Keycloak)

**URL:** <https://datashield.discourse.group/t/opal-ui-logout-does-not-trigger-openid-logout-e-g-keycloak/776>\
**Category:** Beginner Support\
**Created:** [3 May 2023 12:30 UTC](https://datashield.discourse.group/t/opal-ui-logout-does-not-trigger-openid-logout-e-g-keycloak/776 "2023-05-03T12:30:01Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![esalehi](https://avatars.discourse-cdn.com/v4/letter/e/3e96dc/32.png) [@esalehi](https://datashield.discourse.group/u/esalehi)\
**Post date:** [3 May 2023 12:30 UTC](https://datashield.discourse.group/t/opal-ui-logout-does-not-trigger-openid-logout-e-g-keycloak/776/1 "2023-05-03T12:30:01Z")

</div>

Hi, We are using keycloak as Identity Management tool and we found out that Logging out of the OPAL web application via the menu in the upper-right corner only terminates the OPAL session. While the user is redirected to the OPAL login screen, the underlying Keycloak session still exists.Therefore, clicking on the button “Sign in with Keycloak” will immediately lead to an authenticated session, without the user having to reenter their password. I think the logout on Opal should be redirected somehow to the keycloak logout endpoint, right?

Thank you for your support

---

<div class="post-metadata">

**Author:** ![yannick](https://yyz2.discourse-cdn.com/free1/user_avatar/datashield.discourse.group/yannick/32/19_2.png) [@yannick](https://datashield.discourse.group/u/yannick)\
**Post date:** [3 May 2023 19:15 UTC](https://datashield.discourse.group/t/opal-ui-logout-does-not-trigger-openid-logout-e-g-keycloak/776/2 "2023-05-03T19:15:08Z")

</div>

Hi,

Did you check the logout option in the Identity Provider config?

 ![image](https://global.discourse-cdn.com/free1/uploads/datashield1/original/1X/f2051dddb236a36b82e5ecf536606ccf166db7d2.png)
