Dashboard timeout with ADFS SSO

[Sprocket]

Hi there,

We recently implemented SSO for dashboard using our existing ADFS environment.

However we are getting 5 minute timeouts in dashboard in spite of the 15 minutes defined in the organization settings.

So my question is, could this timeout be inherited from the ADFS itself? Our ADFS admin claims this should have nothing to do with it.

Cheers,

HP

[NolanHerring]

I use OKTA and SAML and the OKTA will eventually kick me out of my session, but that is after my 15 minutes of my Meraki setting, so I'm going to assume its ASDF SSO causing it at your 5 minute mark.

Never messed with ADFS SSO but from looking online, there definitely appears to be timer settings for it.

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-single-sign-on-setti...

https://social.msdn.microsoft.com/Forums/en-US/cf155f64-57a0-46f7-82f0-4a75dd5ffbce/sso-timeout?foru...

https://social.msdn.microsoft.com/Forums/vstudio/en-US/83e6e2ae-a41d-4fda-bc6c-5183567acda3/adfs-tim...

[PhilipDAth]

My gut reaction was to say no.

However when the SAML service issues the authentication token it does so for a fixed period of time.  Once that expires so does your authentication.  You can search for "token lifetime" in this article:

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-single-sign-on-setti...

So I think it is not likely to be related - but possible if the default settings have been changed in ADFS.

I would be more suspicous of cookies.  If you log in via an incognito session do you have the same issue?