AuthHub SAML assertion Expiry Query

Products

• VIP Authentication Hub

Issue/Introduction

How to update the SubjectConfirmationData IssueInstant and NotOnOrAfter SAML assertion parameters since it is set to 8 hours by Default?

Example:

<saml2:Assertion ID="_ce01b0cb-******************" IssueInstant="2025-01-06T14:14:03.249Z" Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion" xmlns:xsd=…>

<saml2:SubjectConfirmationData NotOnOrAfter="2025-01-06T22:14:03.243Z" Recipient=”” />

Environment

All AuthHub releases up till 3.3

Resolution

Currently, the assertion is set to Expire to 8hours and that is by default hardcoded and can not be changed.

This will be fixed in 3.4 to use config settings - first use session expiry app metadata if it is defined (similar what is used for oauth apps), then session expiry tenant setting.