Kecloak does not force authentication when user logout if default identity provider is set

Hi Experts,

I am facing a problem when user logout of my webapp, when Default Login provider been set as a external IDP (Identity provider redirector in browser flow).

The current behavior is when user clicks logout on webapp I am internally redirecting keycloak open-id logout api in browser which redirects user to authorization flow, then it get redirect to saml broker login and user re-login back to webapp.

I tried using force Authentication option available in identity provider, but that breaks an flow where user was forced for authentication even when he was successfully logged in his identity provider is one browser tab.

Expectation:
User should be forced for external Idp authentication only when an Logout is called and user should not be redirected to webapp with user session from browser context.

Let me know if the context was clear, or i can share more info if needed.