Question
SunLife
IN
Last activity: 9 Nov 2018 19:55 EST
Session Timeout configured in web.xml in Pega 7.3 Personal edition not working
Adding session-timeout configuration in web.xml for SMA works perfectly fine, but same configuration is not working in PRPC. I configured session timeout in web.xml inside prweb.war, but user is able to access existing session after specified idle time. Is it a bug or as per design?
***Edited by Moderator Marissa to update categories***
Accepted Solution
Pegasystems Inc.
US
PRPC session timeout is not controlled in web.xml.
Timeout is controlled only by AccessGroup Authentication timeout setting for both standard PRPC authentication and also any type of custom authentication, SAML or other.
OCBC Bank
SG
Hi,
Please refer to below PSC post regarding session timeout.
You can try the timeout setting in access group under Advanced tab or you can try using prconfig setting timeout/browser
SunLife
IN
Hi Sandeep,
Thanks for your reply. I know that timeout can be configured through access group or prconfig.xml. But I wanted to know whether it is possible through web.xml or not?
Accepted Solution
Pegasystems Inc.
US
PRPC session timeout is not controlled in web.xml.
Timeout is controlled only by AccessGroup Authentication timeout setting for both standard PRPC authentication and also any type of custom authentication, SAML or other.
Coforge Technologies (Erstwhile Incessant Technologies)
GB
Timeout configured in Accessgroup is Authentication Timeout which is a security feature that prompts user for credentials. Session timeout is defined for high availability in cluster environment to free up idle requestors and also to avoid data security issues. The configuration in web.xml should work.