Skip to content

Latest commit

 

History

History
130 lines (65 loc) · 8.96 KB

configure-session-timeout-5ca23e4.md

File metadata and controls

130 lines (65 loc) · 8.96 KB

Configure Session Timeout

As a tenant administrator, you can configure when the session, created at the Identity Authentication tenant, expires.

You are assigned the Manage Tenant Configuration role. For more information about how to assign administrator roles, see Edit Administrator Authorizations.

Context

The session timeout feature enables closing of the session at the IdP when the configured period has passed. Thе configuration determines how long the IdP keeps the session alive.

By default, the timeout session for Identity Authentication is 12 hours.

When the IdP session has expired, and the application session has also expired, or the user tries to access a second application, Identity Authentication forces the user to provide his or her credentials.

  1. Tries to access protected resource.
  2. Sends request to check if the user has rights to access.
  3. Opens Log On screen; forces user to provide credentials.
  4. Provides credentials.
  5. Grants access.
  6. User accesses content.

Remember:

It takes 2 minutes for the configuration changes to take place.

To configure the session timeout period via the administration console for SAP Cloud Identity Services follow the procedure below:

  1. Sign in to the administration console for SAP Cloud Identity Services.

  2. Under Applications and Resources, choose the Tenant Settings tile.

    At the top of the page, you can view the administrative and license relevant information of the tenant.

  3. Under Single Sign-On, choose the Session Timeout list item.

  4. Set the session timeout period.

    1. From the dropdown list on the right, select either Minutes or Hours.

    2. From the dropdown list on the left, select a number for your choice.

    Note:

    You can choose a value between 5 and 59 for Minutes, and 1 and 12 for Hours.

    The default value is 12 hours.

  5. Save your changes.

    If the operation is successful, the system displays the message Session timeout updated.

Related Information

Tenant SAML 2.0 Configuration

Tenant OpenID Connect Configurations

Change Tenant Texts Via Administration Console

Configure Master Data Texts Via Administration Console

Configure Links Section on Sign-In Screen

Add Instructions Section on Sign-In Screen

Configure X.509 Client Certificates for User Authentication

Configure Tenant Images

Configure Allowed Logon Identifiers

Configure User Identifier Attributes

Configure Trust this browser Option

Enable Back-Up Channels to Send Passcode for Deactivation of TOTP Two-Factor Authentication Devices

Enable Users to Recover Password with Security Questions

Enable Users to Recover Password with PIN Code

Configure Initial Password and Email Link Validity

Configure Trusted Domains

Use Custom Domain in Identity Authentication

Change a Tenant's Display Name

Configure Default Risk-Based Authentication for All Applications in the Tenant

Configure Sinch Service in Administration Console

Configure RADIUS Server Settings (Beta)

Configure Mail Server for Application Processes

Configure IdP-Initiated SSO

Send Security Alert Emails

Send System Notifications via Emails

Configure Customer-Controlled Encryption Keys in Administration Console (Restricted Availability)

Configure Default Language for End User Screens

Configure P-User Next Index

Reuse SAP Cloud Identity Services Tenants for Different Customer IDs