java - Spring security- Infinite user session time out with IDP -
our application using spring security saml handling user authentication. have got requirement keep user session alive infinite period. there way set infinite timeout in spring saml user session time out?
idp has following configuration, no problem there.
<session-config> <session-timeout>-1</session-timeout> </session-config>
in sp, maxauthenticationage set 36000 keep active 10 hrs. default 7200. http://docs.spring.io/spring-security-saml/docs/current/api/org/springframework/security/saml/websso/webssoprofileconsumerimpl.html
one solution keep session alive making authentication requests in background periodically(not sure approach), never logs out. other idea please?
Comments
Post a Comment