We are delighted to share our new EIC Delivery Methodology for efficiently managing Saviynt Implementations and delivering quick time to value. CLICK HERE.

http session timeout limit

JPMac
Regular Contributor
Regular Contributor

We have not set up SSO in our environment.
Authentication is local authentication.


In this case, "Http Session Time Out In Minute (s)" is set to 600. That is, 10 hours.

JPMac_0-1705575489260.png

However, after about 1 hour, the session expires and I need to log in again.

On the other hand, if I set "Http Session Time Out In Minute (s)" to 3, the session expires after 3 minutes, so I know that this function is working.

[Question]

Is there a time limit for "Http Session Time Out In Minute (s)"?
If not, why does the session expire in 1 hour even though it is set to 600 (10 hours)?

6 REPLIES 6

rushikeshvartak
All-Star
All-Star

idp & authentication groovy config is for SSO whereas after Saviynt has been logged in either via SSO / Basic authentication then 30 minutes is http session timeout for saviynt 

grails.plugin.springsecurity.saml.maxAuthenticationAge

Specify the maximum duration (in seconds) users can log in with SSO after initial authentication through the IdP.

Note: The maxAuthenticationAge value must be lesser than or equal to the session logout value defined in the IdP.

Example: 86000

https://saviynt.freshdesk.com/support/solutions/articles/43000661162-saml-metadata-files 

https://docs.saviyntcloud.com/bundle/Internal-Resources/page/Content/Handbooks/Handbook-for-v2021-0-... 


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

JPMac
Regular Contributor
Regular Contributor

@rushikeshvartak 

I have already seen your answer on another forum.
What I want to ask is "Whether the session can be set to not expire for more than one hour in an environment where no IdP has been configured."

It consider from web.xml 

You need to edit web.xml file and below is the tag wherein session timeout can be configured.

 

 

<session-config>
<session-timeout>30</session-timeout>
</session-config>

https://forums.saviynt.com/t5/general-discussions/admin-portal-timeout/m-p/2284#M422


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.

JPMac
Regular Contributor
Regular Contributor

@rushikeshvartak 

There is no such file (web.xml).
Where can I set it up?

JPMac
Regular Contributor
Regular Contributor

Could you please show EIC screen to edit web.xml file?

You need to contact saviynt support


Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.