OAM Federation Acting as a Service Provider (SP) Does Not Timeout requests Based on the SAML Assertion Validity Set by the Identity Provider (IDP)
(Doc ID 2263506.1)
Last updated on JANUARY 31, 2019
Applies to:Oracle Access Manager - Version 22.214.171.124.2 and later
Oracle Identity Federation - Version 126.96.36.199.0 and later
Information in this document applies to any platform.
When OAM Federation is acting as a service provider (SP) it does not timeout requests (force user re-authenticate) based off of the SAML assertion validity times set by the identity provider (IDP).
For example, a remote IDP sends the following SAML response:
However, the user's session is not timing out at the defined time (2017-04-05T19:59:51Z in the above example). OAM is timing out the session based on OAM setup for session timeout which defaults to 8 hours.
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document