KEYCLOAK-4568 Identity broker service may fail to validate client session if there is more then one active session

services/src/main/java/org/keycloak/services/resources/IdentityBrokerService.java

@@ -257,8 +257,8 @@ public class IdentityBrokerService implements IdentityProvider.AuthenticationCal
                 byte[] check = md.digest(input.getBytes(StandardCharsets.UTF_8));
                 if (MessageDigest.isEqual(decoded, check)) {
                     clientSession = cs;
+                    break;
                 }
-                break;
             }
         }
         if (clientSession == null) {