Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Chhatrapal Singh (Chhatrapal)
Roche Pharma
Team Leader PEGA Development
Roche Pharma
IN
Chhatrapal Member since 2012 14 posts
Roche Pharma
Posted: May 29, 2019
Last activity: Jun 10, 2019
Posted: 29 May 2019 11:01 EDT
Last activity: 10 Jun 2019 3:28 EDT
Closed

SAML 2.0 SSO timeout setup for PEGA 7.4

Hi,

My requirement is to allow our SSO SAML to automatically logged out after 30 min (as per my org standard) I have found some articles in PDN but all suggest to put timeout in User access group and/or use timeout activity in Authentication service. (which is PARTIALLY solving my requirement ).

I am looking a solution to apply Organization standard timeout when Ideal browser session timeout reached. And user should get navigated to SSO login screen rather passivating user session and prompt for PEGA login id password.

Please note i have went through lots of article in PDN but all were suggesting to configure timeout in access group and then some other steps ...

But i have to configure logic WITHOUT considering access group timeout.

Please assist ? I am using PEGA 7.4

Few articles which i went through were:

Show More

Hi,

My requirement is to allow our SSO SAML to automatically logged out after 30 min (as per my org standard) I have found some articles in PDN but all suggest to put timeout in User access group and/or use timeout activity in Authentication service. (which is PARTIALLY solving my requirement ).

I am looking a solution to apply Organization standard timeout when Ideal browser session timeout reached. And user should get navigated to SSO login screen rather passivating user session and prompt for PEGA login id password.

Please note i have went through lots of article in PDN but all were suggesting to configure timeout in access group and then some other steps ...

But i have to configure logic WITHOUT considering access group timeout.

Please assist ? I am using PEGA 7.4

Few articles which i went through were:

***Edited by Moderator Marissa to update platform capability tags****

Show Less
To see attachments, please log in.
Data Integration
Security

Posted: 5 years ago
Updated: 5 years ago
Posted: 8 Jun 2019 2:05 EDT
Updated: 8 Jun 2019 2:06 EDT
Ajay Rangarh (Ajay_Rangarh)
Instellars
Consultant
Instellars
IN

Hi,

Have you considered using the IDP server's specific settings to configure session timeouts?

For e.g. ADFS provide session timeout settings to handle the session on the server itself rather than in the calling authentication service.

To see attachments, please log in.
Posted: 5 years ago
Posted: 10 Jun 2019 3:28 EDT
Chhatrapal Singh (Chhatrapal)
Roche Pharma
Team Leader PEGA Development
Roche Pharma
IN

Hi Ajay,

Thanks for your comment :)

I think updating IDP global value (which is 1hrs) and serves the whole organization as standard value is not recommended but rather we have to control session timeout from PEGA. I can customize the solution and can achieve it. I have one solution in my mind and at first attempt it seems to working.

However i am looking any other OOTB solution without using ACCESS Groups Authentication timeout. If anyone aware of? 

 

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice