.net - STS logging user out after 60 mins, how to extend? -


i have setup relying party, sharepoint site , claims application. application's talking each other , sso working sharepoint. issue after hour, user logged out of application , sent sts login. can't seem pinpoint needs changed extend users "session." realize possibly cookie , not session. have pointers? spent time looking around on web, haven't been able pin point solution issue.

i have done of following iis extend timeout no avail:

  1. change application pools idle time-out.
  2. change asp session time-out value going asp – session properties under iis manager.
  3. change cookie settings time-out value going session state ->cookie settings

federatedauthentication of rp:

<federatedauthentication>     <wsfederation passiveredirectenabled="true" issuer="mystsapplication" realm="relyingparturl" requirehttps="false" />     <cookiehandler requiressl="false" path="/" name="mycookiehandler" persistentsessionlifetime="0:10:0" />   </federatedauthentication> 

this in web.config of rp:

web.config of sts application:

 authentication mode="forms">     <forms loginurl="login.aspx" protection="all" timeout="600" name=".aspxauth" path="/" requiressl="false" slidingexpiration="true" defaulturl="default.aspx" cookieless="usedeviceprofile" enablecrossappredirects="false" /> </authentication> 

by default, wif use shorter of either duration indicated in token or duration indicated in local config. can decide use other timeout if wish. here's helper put assist that:

http://brockallen.com/2013/02/17/overriding-ws-federation-token-lifetime-in-thinktecture-identitymodel/

and

http://brockallen.com/2013/02/17/sliding-sessions-in-wif-with-the-session-authentication-module-sam-and-thinktecture-identitymodel/


Comments

Popular posts from this blog

html - Sizing a high-res image (~8MB) to display entirely in a small div (circular, diameter 100px) -

java - IntelliJ - No such instance method -

identifier - Is it possible for an html5 document to have two ids? -