From 063f5303dd64f2cd4eee09f40eea65b9a6fc6ad5 Mon Sep 17 00:00:00 2001
From: Alexey Kazakov <alkazako@redhat.com>
Date: Sat, 11 Mar 2017 12:59:25 -0800
Subject: [PATCH] KEYCLOAK-4568 Identity broker service may fail to validate
 client session if there is more then one active session

---
 .../org/keycloak/services/resources/IdentityBrokerService.java  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/services/src/main/java/org/keycloak/services/resources/IdentityBrokerService.java b/services/src/main/java/org/keycloak/services/resources/IdentityBrokerService.java
index c950ebe0ffe..bf3bc9f9f43 100755
--- a/services/src/main/java/org/keycloak/services/resources/IdentityBrokerService.java
+++ b/services/src/main/java/org/keycloak/services/resources/IdentityBrokerService.java
@@ -257,8 +257,8 @@ public class IdentityBrokerService implements IdentityProvider.AuthenticationCal
                 byte[] check = md.digest(input.getBytes(StandardCharsets.UTF_8));
                 if (MessageDigest.isEqual(decoded, check)) {
                     clientSession = cs;
+                    break;
                 }
-                break;
             }
         }
         if (clientSession == null) {