Configure Session Timeout in Identity Manager

Products

• CA Identity Suite

Issue/Introduction

To configure session timeout for Identity Manager, follow the steps mentioned in the resolution.

Environment

Release : 14.5

Component : Identity Manager

Resolution

 

For on-Premises, non-VAPP deployments:

 

Identity Manager UI Session timeout 

----------------------------
This is the idle timeout for the Identity Manager sessions; the number of minutes before session is expired and user is prompted to enter their credentials. The default is 30 minutes.

The setting is in web.xml under..

...\iam_im.ear\user_console_war\WEB-INF

    <session-config>
      <!-- 30 minutes -->
      <session-timeout>30</session-timeout>
    </session-config>

 

Identity Manager Management Console Session timeout

----------------------------
This is the idle timeout for the Management Console, assuming authentication has been configured during installation; the number of minutes before session is expired and user is prompted to enter their credentials. The default is 30 minutes.

The setting is in web.xml under..

...\iam_im.ear\management_console.war\WEB-INF

    <session-config>
      <session-timeout>30</session-timeout>
    </session-config>

 

 

For Virtual Application (VAPP) Deployments:

 

1. Navigate to /opt/CA/VirtualAppliance/custom/IdentityManager/config directory.

2. Open session-timeout file for editing.

3. In the file, specify the numerical value representing the session timeout in minutes as shown below:

    # This file holds the HTTP session timeout value used by Identity Manager User Console
    # This file must contain a single line (except comments beginning with a "#") with a numeric value representing the session timeout in minutes 30

4. Restart the corresponding server for the changes to take effect.

 

Additional Information

If an SSO timeout is configured then we recommend changing the Session timeout the SSO session timeout value. For example : 150