As a tenant administrator, you can configure when the session, created at the Identity Authentication tenant, expires.
You are assigned the Manage Tenant Configuration role. For more information about how to assign administrator roles, see Edit Administrator Authorizations.
The session timeout feature enables closing of the session at the IdP when the configured period has passed. Thе configuration determines how long the IdP keeps the session alive.
By default, the timeout session for Identity Authentication is 12 hours.
When the IdP session has expired, and the application session has also expired, or the user tries to access a second application, Identity Authentication forces the user to provide his or her credentials.
- Tries to access protected resource.
- Sends request to check if the user has rights to access.
- Opens Log On screen; forces user to provide credentials.
- Provides credentials.
- Grants access.
- User accesses content.
It takes 2 minutes for the configuration changes to take place.
To configure the session timeout period via the administration console for SAP Cloud Identity Services follow the procedure below:
-
Sign in to the administration console for SAP Cloud Identity Services.
-
Under Applications and Resources, choose the Tenant Settings tile.
At the top of the page, you can view the administrative and license relevant information of the tenant.
-
Under Single Sign-On, choose the Session Timeout list item.
-
Set the session timeout period.
-
From the dropdown list on the right, select either Minutes or Hours.
-
From the dropdown list on the left, select a number for your choice.
You can choose a value between 5 and 59 for Minutes, and 1 and 12 for Hours.
The default value is 12 hours.
-
-
Save your changes.
If the operation is successful, the system displays the message Session timeout updated.
Related Information
Tenant OpenID Connect Configurations
Change Tenant Texts Via Administration Console
Configure Master Data Texts Via Administration Console
Configure Links Section on Sign-In Screen
Add Instructions Section on Sign-In Screen
Configure X.509 Client Certificates for User Authentication
Configure Allowed Logon Identifiers
Configure User Identifier Attributes
Configure Trust this browser Option
Enable Back-Up Channels to Send Passcode for Deactivation of TOTP Two-Factor Authentication Devices
Enable Users to Recover Password with Security Questions
Enable Users to Recover Password with PIN Code
Configure Initial Password and Email Link Validity
Use Custom Domain in Identity Authentication
Change a Tenant's Display Name
Configure Default Risk-Based Authentication for All Applications in the Tenant
Configure Sinch Service in Administration Console
Configure RADIUS Server Settings (Beta)
Configure Mail Server for Application Processes
Send System Notifications via Emails
Configure Customer-Controlled Encryption Keys in Administration Console (Restricted Availability)
Configure Default Language for End User Screens
Reuse SAP Cloud Identity Services Tenants for Different Customer IDs