Requiring reauthentication for new and expired sessions for a token credentials authentication service
To add an extra layer of security, you configure Pega Platform to reauthenticate new sessions and to reauthenticate when reactivating an expired session. The time-out period is specified on the operator's access group or is managed by the application server or another external facility.
Open the service from the navigation panel in Dev Studio by clickingand choosing a service from the instance list.
On the Token credentials tab, expand the Advanced configuration settings section.
Select the Use access group timeout checkbox to use the authentication time-out values that are specified in the user access group. This setting determines how long a user session can remain inactive before a client has to present another valid token. The token can be obtained by asking the user to log in, or it can be obtained from the identity provider. Clear the Use access group timeout checkbox if the time-out is managed by the application server or another external facility.
- Authentication services
To override or extend the default authentication process, create and configure an authentication service.
- More about authentication services
This page describes additional topics relevant to authentication services that are not directly referenced on the rule form.
- Configuring a token credentials authentication service
After you create a token credentials authentication service, configure it so that Pega Platform uses the specified token provider for authenticating users. Select this type of service for offline mobile applications. You can map claims from the token to properties in Pega Platform, and configure optional features such as preauthentication and postauthentication activities.