Your external method is producing Java Subjects that contain both of those context class Principals, ergo the IdP determines that it satisfies the subsequent request and reuses it. You configured the IdP to do that, and that is up to you to fix. -- Scott