http session timeout limit

[JPMac]

We have not set up SSO in our environment.
Authentication is local authentication.

In this case, "Http Session Time Out In Minute (s)" is set to 600. That is, 10 hours.

However, after about 1 hour, the session expires and I need to log in again.

On the other hand, if I set "Http Session Time Out In Minute (s)" to 3, the session expires after 3 minutes, so I know that this function is working.

[Question]

Is there a time limit for "Http Session Time Out In Minute (s)"?
If not, why does the session expire in 1 hour even though it is set to 600 (10 hours)?

[rushikeshvartak]

idp & authentication groovy config is for SSO whereas after Saviynt has been logged in either via SSO / Basic authentication then 30 minutes is http session timeout for saviynt 

grails.plugin.springsecurity.saml.maxAuthenticationAge

Specify the maximum duration (in seconds) users can log in with SSO after initial authentication through the IdP. Note: The maxAuthenticationAge value must be lesser than or equal to the session logout value defined in the IdP. Example: 86000

https://saviynt.freshdesk.com/support/solutions/articles/43000661162-saml-metadata-files 

https://docs.saviyntcloud.com/bundle/Internal-Resources/page/Content/Handbooks/Handbook-for-v2021-0-... 

[JPMac]

@rushikeshvartak 

I have already seen your answer on another forum.
What I want to ask is "Whether the session can be set to not expire for more than one hour in an environment where no IdP has been configured."

[rushikeshvartak]

It consider from web.xml 

You need to edit web.xml file and below is the tag wherein session timeout can be configured.

<session-config>
<session-timeout>30</session-timeout>
</session-config>

https://forums.saviynt.com/t5/general-discussions/admin-portal-timeout/m-p/2284#M422

[JPMac]

@rushikeshvartak 

There is no such file (web.xml).
Where can I set it up?

[JPMac]

Could you please show EIC screen to edit web.xml file?

[rushikeshvartak]

You need to contact saviynt support