SiteMinder : LLM desktop based application integration with SiteMinder is idling frequently

Products

• SITEMINDER

Issue/Introduction

It was observed that post successful login to LLM application using SiteMinder authentication , user is getting kicked off from the LLM application session even before the configured Idle timeout values.

 

Environment

R12.8.x

Cause

Customer has developed the LLM application using Dart platform and SMSESSION is generated using application url in the in-app webview and verify the presence of the SMSESSION cookie. If the cookie exists, store its value in local storage. When making API requests, ensure that the SMSESSION cookie is included with the request. Access Gateway includes SM_SERVERSESSIONID and SM_USER in the request header, allowing the API to be executed for validating the user.

Since this is not like conventional webagent to fetch the session grace period , we have to set this explicitly for this desktop based applications link in this scenario.. 

Resolution

Solution

Set the "sessionGracePeriod"  to a lower value in the ACO of the webagent.

Additional Information

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-8/configuring/web-agent-configuration/session-protection/session-grace-period-and-update-period-settings.html