Getting premature timeout while actively accessing persistent realm

Products

• SITEMINDER
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign-On

Issue/Introduction

Use case:

/affwebservices/redirectjsp/dumpvars.jsp is configured as Persistent Realm with following timeout settings.

Idletimeout=15 min
Maxtimeout=1hour

 

While actively accessing this resource, user's session gets loggedout randomly before reaching MaxTimeout.

This does not happen on a Non-Persistent realm.

Environment

All SiteMinder versions

Cause

Persistent Realm did not have "Validation Period" configured so the session record was removed before reaching the maxtimeout.

 

Resolution

When configuring "Persistent Realm", "Validation Period" must be configured with a time value that can occur at least 2 times during the idletimeout period.

For example, if the Idletimeout is set to 15 minutes, the "Validation Period" must be set to 7 minutes or less.

This ensure the session in the session store gets updated.