Portal Access to JDE App sign out issues

I am currently implementing an APM Full Webtop with a Portal Access resource to one backend Web App. SSO is not involved here, so a user authenticates to the APM logon page via AD, and then once the portal access resource is loaded, they're presented with the web apps login page. Assuming we're already authenticated to the full webtop, an issue I am seeing intermittently is the following:

 

UserA logs into the web app and is presented their content UserA then signs out of the Web App, still connected to the APM session. UserB then signs in to the Web App, but is presented the content of UserA

 

When connecting to the Web App directly, this issue does not occur. I say intermittently because I am unable to consistently reproduce this. I am wondering where I should begin looking:

 

Is the content just cached due to the Optimized-Caching webaccel profile on the VS? Or via the caching settings on the Portal Access config?

 

Is this a cookie or sessionID issue where the Web App thinks the 2nd connection is actually the original since we're still technically connected through the Portal on same session (and SNAT Enabled so same source IP)?

 

Is there a way to honor the Sign Out URI on the web page within the Portal Access resource to kill off any type of cookie or sessionID persistence? I don't want to kill off the entire access policy session, just be able to log a different user into the Portal while within the same Access Policy session.

 

OR is this just the web application acting up.

 

This is an Oracle JAS server, which I have limited familiarity with so just starting to dig in to see what is going on.

 

Any help appreciated, thanks all!