OAM Federation Acting as a Service Provider (SP) Does Not Timeout requests Based on the SAML Assertion Validity Set by the Identity Provider (IDP)
(Doc ID 2263506.1)
Last updated on DECEMBER 11, 2017
Applies to:Oracle Access Manager - Version 188.8.131.52.2 and later
Oracle Identity Federation - Version 184.108.40.206.0 and later
Information in this document applies to any platform.
When OAM Federation is acting as a service provider (SP) it does not timeout requests (force user re-authenticate) based off of the SAML assertion validity times set by the identity provider (IDP).
For example, a remote IDP sends the following SAML response:
However, the user's session is not timing out at the defined time (2017-04-05T19:59:51Z in the above example). OAM is timing out the session based on OAM setup for session timeout which defaults to 8 hours.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!