Which key can I use for the session ID in the OIDC auth to tack the user login logout

Sharma, HariomX 20 Reputation points
2026-11-05T10:05:48.2+00:00

In my app I want to track the user login and logout tracking which key of the OIDC response I can use.

Artifact Signing
Artifact Signing

A fully managed end-to-end service for digitally signing code, documents, and applications. (formerly Trusted Signing)

0 comments
Answer accepted by question author
Mohammed Hamed 160 Reputation points
2026-11-05T10:20:31.33+00:00

@Sharma, HariomX Use oid to identify the user, but generate your own session ID for each login session. Store the login and logout timestamps against that session ID. This is safer than treating an OIDC token claim as your application's session identifier. If this answers your question, please mark it as the accepted answer.

Was this answer helpful?

1 person found this answer helpful.
0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.