Support Article
SAML SSO session timeout fails
SA-72798
Summary
When implementing SAML Auth single sign- on (SSO) using (IdP Initiated SSO) Pega 7.1.7, SAML SSO session timeout fails.
Error Messages
Not Applicable
Steps to Reproduce
Configure SAML Auth with timeout.
Root Cause
SAML Auth rules by default have the pySupportsPegaTimeout property set to False. Hence, it does not use the Pega timeout that is configured on the access group.
Resolution
pySupportsPegaTimeout is set to true using an activity execution. Activity steps are configured to open the SAML Auth rules record using the Open-Obj-by-Handle and update the pySupportsPegaTimeout property to true using Property-set. The record is saved using Obj-Save and committed in another step.
Advanced configuration settings are used to include the pySAMLWebSSOTimeoutActivity. This activity is withdrawn. Hence, the Availability is set to Available and used as the Timeout activity. Timeout is achieved when the Timeout activity executes after the configured time in the access group and invalidates the requestor.
Published March 22, 2019 - Updated October 8, 2020
Have a question? Get answers now.
Visit the Collaboration Center to ask questions, engage in discussions, share ideas, and help others.