cancel
Showing results for 
Search instead for 
Did you mean: 

Dashboard timeout with ADFS SSO

Here to help

Dashboard timeout with ADFS SSO

Hi there,

We recently implemented SSO for dashboard using our existing ADFS environment.

However we are getting 5 minute timeouts in dashboard in spite of the 15 minutes defined in the organization settings.

 

So my question is, could this timeout be inherited from the ADFS itself? Our ADFS admin claims this should have nothing to do with it.

 

Cheers,

HP

2 REPLIES 2
Kind of a big deal

Re: Dashboard timeout with ADFS SSO

I use OKTA and SAML and the OKTA will eventually kick me out of my session, but that is after my 15 minutes of my Meraki setting, so I'm going to assume its ASDF SSO causing it at your 5 minute mark.

Never messed with ADFS SSO but from looking online, there definitely appears to be timer settings for it.

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-single-sign-on-setti...

https://social.msdn.microsoft.com/Forums/en-US/cf155f64-57a0-46f7-82f0-4a75dd5ffbce/sso-timeout?foru...

https://social.msdn.microsoft.com/Forums/vstudio/en-US/83e6e2ae-a41d-4fda-bc6c-5183567acda3/adfs-tim...
Nolan Herring | nolanwifi.com
TwitterLinkedIn
Kind of a big deal

Re: Dashboard timeout with ADFS SSO

My gut reaction was to say no.

 

However when the SAML service issues the authentication token it does so for a fixed period of time.  Once that expires so does your authentication.  You can search for "token lifetime" in this article:

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/ad-fs-single-sign-on-setti...

So I think it is not likely to be related - but possible if the default settings have been changed in ADFS.

 

I would be more suspicous of cookies.  If you log in via an incognito session do you have the same issue?

 

Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.