OAM Federation Acting as a Service Provider (SP) Does Not Timeout requests Based on the SAML Assertion Validity Set by the Identity Provider (IDP)
Last updated on DECEMBER 11, 2017
Applies to:
Oracle Access Manager - Version 11.1.2.2.2 and laterOracle Identity Federation - Version 11.1.2.0.0 and later
Information in this document applies to any platform.
Symptoms
When OAM Federation is acting as a service provider (SP) it does not timeout requests (force user re-authenticate) based off of the SAML assertion validity times set by the identity provider (IDP).
For example, a remote IDP sends the following SAML response:
However, the user's session is not timing out at the defined time (2017-04-05T19:59:51Z in the above example). OAM is timing out the session based on OAM setup for session timeout which defaults to 8 hours.
Cause
Sign In with your My Oracle Support account |
|
Don't have a My Oracle Support account? Click to get started |
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms