ADFS 2.0 Session TimeOut in Single Sign-On Script

We are currently working on an SSO project that uses ADFS 2.0. as the trust of IDPs / SRs. One of the main requirements of the wrt project is to re-authenticate the user after a waiting period (anything can be). After an advanced search, I found only a few implementations (besides the SharePoint examples) that talk about the WebSSOlifetime and TokenLifeTime settingson the ADFS server. I understand that WebSSOLifeTime is the server setting (default value: 480), and TokenLifeTime is the RP level setting (default value is 0 - 10 hours) for the token to expire. To accidentally test the settings, I changed the value of WebSSOlifetime to 5 minutes, and TokenLifeTime to 3 minutes for my RP application. But this did not cause re-authentication after 5 minutes of inactivity (as set in WebSSOlifetime). In the tested RP applications, Google applications were included - an integrated ADFS data warehouse and a single-page application for checking requirements values. It will be great if anyone can post any relevant pointers to the ADFS 2.0 session service functions.

+2
source share
1 answer

. Stackoverflow ( !). , IP/STS, ( , Oasis documentation).

( freshness = "0" ), federatedAuthentication web.config, IDP WCT. ( ), TokenLifeTime set script . (TokenLifeTime) , , .

URL- : https://XXX/adfs/ls/?wa=wsignin1.0&wtrealm=https%3a%2f%2fXXX%2fXXX&wfresh=0&wctx=rm%3d0%26id%3dpassive%26ru%3d%252fXXX%252fDefault.aspx&wct=2013-02-14T01%3a36%3a17Z

wfresh wctx IDP .

, (, TokenLifetime WebSSOLifetime) . ( , :)).

+2
source