SAML Assertion Validity - Max value

Products

• CA API Gateway

Issue/Introduction

The article addresses the issue for saml token validity , When trying to configure token validity for an application as 4 hours saml token assertion does not allow more than an hour.

Environment

Release : 9.X 10.X

CA API Management Gateway

Cause

The default the max saml token validity can be configured as one hour.

Resolution

1. Save/Export policy to an XML.

2. Edit the XML and Increase the ConditionsNotBeforeSecondsInPast/ConditionsNotOnOrAfterExpirySeconds values to the needed. Ex: 4 hrs.

3. Save the XML.

4. Import the Saved XML.

5. Verify the usecase.

Additional Information

Saml Token Assertion documentation -  https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-api-management/api-gateway/11-0/policy-assertions/assertion-palette/xml-security-assertions.html