Revoking a Keycloak session
Understanding the Keycloak Session
A Keycloak session, in the context of EBRAINS, is a crucial element that enables seamless navigation through all linked services. Essentially, this session maintains your login status across all platforms that are connected to EBRAINS Keycloak.
When you sign into your EBRAINS account, you leverage the Single Sign-On (SSO) feature. This means all services associated with EBRAINS Keycloak can recognize your Keycloak session. Consequently, these services won't require you to log in each time you visit. Instead, they automatically log you in using your existing Keycloak session. This feature ensures you do not need to repeatedly sign in individually to every EBRAINS service you visit.
The Impact of Revoking Your Keycloak Session
Revoking your Keycloak session signifies to EBRAINS that you no longer wish for automatic logins. This action generally leads to automatic logouts from many services connected to EBRAINS Keycloak, though the specifics vary based on each service's implementation.
The automatic logout function hinges on how each service utilizes the Single Sign-On (SSO) feature. Services like Drive and Wiki, for example, won't automatically log you out upon session revocation. After the initial login, these services maintain your login status through local sessions.
In contrast, other services depend directly on the Keycloak session for user authentication. Consequently, revoking the Keycloak session would trigger an immediate logout from these services. It's important to note that the behavior may differ across services, reflecting their individual SSO usage and login mechanisms.
Reinstating a Keycloak session
To reactivate your Keycloak session and resume the convenience of Single Sign-On (SSO), all you need to do is log back into your account. This action will initiate a new Keycloak session.