We're using ory for SSO (paid service) I have 2 q...
# ory-network
c
We're using ory for SSO (paid service) I have 2 questions. When a user logs out of our application (he is stil logged into ory), and then retries the login it gets the following UI. (screenshot) Question 1: The user (as its still logged in) is asked to authenticate with its password, if that user now wants to login as a different user, only option is to uwe the 'logout' button (see screenshot). That logout button however redirects to the url given in the projects ""default_browser_return_url" setting. (Branding -> Browser redirects -> Post logout redirect. That is undesired, as the users might gets there from 2 different applications A and B (2 different oauth2 clients registered with the project). How can the user login using a different user, starting from application with url A, without getting redirected to an application B. Question 2: In our project, when we logout the application (but not ory), when het logs in, he is aksed to re-authenticate with its password. Thats desired.... however In another ory project, it behaves differently, when a user logs out (of application) but not ory, and we re-start the login flow, the user is redirected to ory url, but it he gets automatically logged in, without reconfirming its password. We cannot find what setting of the project this controls, Can you help? We want this project to behave the same.
m
Are you using OAuth2 based flows?
c
yes website/application A and website/application B have oauth2 clients. (with openid connect I think).
Any idea?