Should I make the users logout from multi devices?

Get Help
,
1

Hi there,

I’m facing the doubt which is “Should we make the users logout from multi devices when the users logout from 1 device?”

My application is:

  • Connect multi applications with SSO
  • Used with both of PC and mobile (browser)

For example, the user logged in App A and App B via PC browser and smartphone browser. If the user logged out App A via PC browser, we force him/her to logout from App A in smartphone browser, App B in PC browser and smartphone browser.

Is it correct way for login/out?

I’m not sure this approach is correct or not. I doubt it is better to make the users logout from the same browser and same device like logout only from App B on PC browser if the user logout from App A on PC browser.

3

Hi @sayopip

Welcome to the Auth0 Community!

Thank you for posting your question. By default, logouts should be per-device and per-browser. Clearing SSO in the current browser is recommended so the user is signed out of all your SSO-participating apps in that browser. In a case where your application needs to offer a separate ‘Log out of all devices’ option, you can achieve this by revoking the refresh tokens or terminating the session in Auth0. You can read further about session layers in Auth0 there → https://auth0.com/docs/manage-users/sessions/session-layers

Thanks!
Dawid