Skip to main content

Users getting logged out after two minutes with SiteMinder

Symptom​

With SiteMinder (or a similar SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO.-based SSOSSO An authentication scheme that lets users sign in once with an identity provider and access Process360 Live without re-entering credentials. provider), users are logged out or see a timeout dialog shortly after signing in. When debugging the SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO. assertions (see the SAML documentation or a SAMLSAML An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider. Process360 Live supports SAML 2.0 for SSO. tracer), the authentication statement shows a SessionNotOnOrAfter very close to the AuthnInstant — only a short time between authentication and session expiry:

<ns2:AuthnStatement AuthnInstant="2022-01-20T19:55:23Z" SessionIndex="iCOpSprLm+RFlKUuSRQXGFZka+s=gOdlag==" SessionNotOnOrAfter="2022-01-20T19:56:53Z">

Cause​

In some SiteMinder versions, the default session length matches the assertion validity, which can be as short as two minutes.

Resolution​

With your SiteMinder team, set the session duration:

  1. Open the SiteMinder Administrative Interface.
  2. Find the SSOSSO An authentication scheme that lets users sign in once with an identity provider and access Process360 Live without re-entering credentials. configuration section with Recommended SP Session Duration.
  3. Set it to Customize.
  4. Then either use Omit (the platform's default timeout is 60 minutes) or set a Custom length appropriate for your security needs.
  5. Save your changes.