Hi, I've spent a lot of time researching issues related to oidc session change detection as it was not properly working with Gluu 3.1.6 and later. I've discussed my research and provided a complete bug report in the following repo https://github.com/livetocode/gluu-oxauth-bug-report-01, which also includes sample projects for reproducing the issues. I've also submitted the following pull request: https://github.com/GluuFederation/oxAuth/pull/1193 Note that the issues are severe since they can cause infinite loops and flood Gluu with authorization requests. Hope this helps, Morgan