Just for update, this issue was resolved by removing prompt=login parameter from get_authorization_url request. Removing this parameter from request results in Gluu using same authentication session which was previously been started from different app. This prevents forcing Gluu to re-authenticate the user again.