Forum Discussion

dp_119903's avatar
dp_119903
Icon for Cirrostratus rankCirrostratus
Jan 12, 2017
Solved

APM Inactivity Timeout

I have F5 setup as a saml sp and I have an external IDP. I have an inactivity timeout set to 2 hours, but I have users complaining that they are getting timeout errors from the F5 sometimes as early...
application delivery
BIG-IP Access Policy Manager (APM)
owa
saml
  • dp_119903's avatar
    dp_119903
    Jan 13, 2017

    Well, I'm monitoring the session and sure enough the inactivity timer appears to be doing what it's supposed to do. It's set for 7200 seconds and I see it set to expire 7200 seconds after the user logs in. I also see it incrementing with their activity.

     

    As for persistence I realized I don't want persistent cookies b/c then the cookies would be in memory and if the user closed their browser the session wouldn't end and that wouldn't work for my scenario in the event that they were using a public PC, hence the reason I don't have persistent cookies enabled.

     

dp_119903's avatar
dp_119903
Icon for Cirrostratus rankCirrostratus
Jan 13, 2017

Well, I'm monitoring the session and sure enough the inactivity timer appears to be doing what it's supposed to do. It's set for 7200 seconds and I see it set to expire 7200 seconds after the user logs in. I also see it incrementing with their activity.

 

As for persistence I realized I don't want persistent cookies b/c then the cookies would be in memory and if the user closed their browser the session wouldn't end and that wouldn't work for my scenario in the event that they were using a public PC, hence the reason I don't have persistent cookies enabled.