SAML Authentication Timeout Not Working
Hi, we selected 'Use PegaRULES Timeout' in SAML auth service and defined the timeout interval in access group. Customer is launching Pega application using SAML/SSO (IDP initiated).
After a duration of inactivity that causes a timeout, we expect user to get a prompt to re-enter Operator ID/password.
However, this is not happening, Please help.
Accepted Solution
Updated: 16 Apr 2020 21:12 EDT
Pegasystems Inc.
US
Hi Will,
The Authentication timeout specified in Access Group may not show the Basic Authentication browser pop-up after inactivity with SAML/SSO based authentications.
Check this article for the reasons and multiple insights - https://collaborate.pega.com/question/authentication-timeout-not-working
Other options include configuring timeout at IDP level or Explore pxSessionTimer option.
Pegasystems Inc.
US
Thanks for your reply. I also talked to GCS today. Looks like pxSessionTimer is a recommended solution for SAML timeout and we decided to use it (though client still questions about the OOTB access group timeout checkbox available in SAML auth service).
I'm hoping that pxSessionTimer would become an easy OOTB configuration in future.
Stratosphere Technology Consulting LLC
US
How does the pxSessionTimer work for users using the Developer Portal. We can't add this section to the portal header sections as they are final.
Pegasystems Inc.
US
For the developer portal, we are using the timeout setting in access group. You will get the prompt to enter Operator ID and password after timeout.
Stratosphere Technology Consulting LLC
US
How do the user login. Using SAML Authentication or PRServlet?.
My scenario is, production support users login to application via SAML and they have Developer Portal. Using ' Use PegaRULES Timeout' option in the SAML authentication rule is not working. After Timeout users are not getting re-authenticated on clicking the links, especially the links in the Header section. The screen freezes with an error. We are on Pega 7.1.9.
Pegasystems Inc.
US
Hello!
If you open an Support Case as Will suggested above, please let us know the ID so that we may track it for you.
Thanks!
Marissa | Senior Moderator | Pega Collaboration Center