Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Will Cho (Will Cho)
PEGA
Principal System Architect
Pegasystems Inc.
US
Will Cho Member since 2008 158 posts
PEGA
Posted: Apr 16, 2020
Last activity: Apr 28, 2020
Posted: 16 Apr 2020 8:58 EDT
Last activity: 28 Apr 2020 8:13 EDT
Closed
Solved

SAML Authentication Timeout Not Working

Hi, we selected 'Use PegaRULES Timeout' in SAML auth service and defined the timeout interval in access group.  Customer is launching Pega application using SAML/SSO (IDP initiated). 

After a duration of inactivity that causes a timeout, we expect user to get a prompt to re-enter Operator ID/password.

However, this is not happening,  Please help.

SAML auth timeout setting

To see attachments, please log in.
Pega Platform 7.2.2
Security
Cross-Industry
Lead System Architect

  • Shivakumar Hugar

Accepted Solution

Posted: 4 years ago
Updated: 4 years ago
Posted: 16 Apr 2020 18:36 EDT
Updated: 16 Apr 2020 21:12 EDT
Harish Gunneri (Harish_Gunneri)
PEGA
Senior Principal Engineer, Technical Support
Pegasystems Inc.
US

Hi Will,

 

The Authentication timeout specified in Access Group may not show the Basic Authentication browser pop-up after inactivity with SAML/SSO based authentications. 

 

Check this article for the reasons and multiple insights - https://collaborate.pega.com/question/authentication-timeout-not-working

 

Other options include configuring timeout at IDP level or Explore pxSessionTimer option.

 

 

To see attachments, please log in.
Posted: 4 years ago
Posted: 16 Apr 2020 21:27 EDT
Will Cho (Will Cho)
PEGA
Principal System Architect
Pegasystems Inc.
US

Thanks for your reply.  I also talked to GCS today.  Looks like pxSessionTimer is a recommended solution for SAML timeout and we decided to use it (though client still  questions about the OOTB access group timeout checkbox available in SAML auth service).

I'm hoping that pxSessionTimer would become an easy OOTB configuration in future.

To see attachments, please log in.
Posted: 4 years ago
Posted: 27 Apr 2020 14:07 EDT
Satish Reddy (SReddyR87)
Stratosphere Technology Consulting LLC

Stratosphere Technology Consulting LLC
US

How does the pxSessionTimer work for users using the Developer Portal. We can't add this section to the portal header sections as they are final.

To see attachments, please log in.
Posted: 4 years ago
Posted: 27 Apr 2020 14:39 EDT
Will Cho (Will Cho)
PEGA
Principal System Architect
Pegasystems Inc.
US

For the developer portal, we are using the timeout setting in access group.  You will get the prompt to enter Operator ID and password after timeout.

To see attachments, please log in.
Posted: 4 years ago
Posted: 27 Apr 2020 15:03 EDT
Satish Reddy (SReddyR87)
Stratosphere Technology Consulting LLC

Stratosphere Technology Consulting LLC
US

How do the user login. Using SAML Authentication or PRServlet?.

My scenario is,  production support users login to application via SAML and they have Developer Portal. Using ' Use PegaRULES Timeout' option in the SAML authentication rule is not working. After Timeout users are not getting re-authenticated on clicking the links, especially the links in the Header section. The screen freezes with an error. We are on Pega 7.1.9.

To see attachments, please log in.
Posted: 4 years ago
Posted: 28 Apr 2020 8:13 EDT
Marissa Rogers (MarissaRogers)
MOD
Principal Knowledge Management Specialist
Pegasystems Inc.
US

Hello! 

If you open an Support Case as Will suggested above, please let us know the ID so that we may track it for you.

Thanks!

Marissa | Senior Moderator | Pega Collaboration Center

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice