Forum Discussion

sinum's avatar
sinum
Icon for Altostratus rankAltostratus
Aug 15, 2024

APM Session timeout splash

Hi All, We are using APM as oauth client to provide SSO for applications hosted behind LTM, the problem we are facing now F5 is not automatically providing any sign about session timeout, user has t...
APM
LTM
sso apm
sinum's avatar
sinum
Icon for Altostratus rankAltostratus

Lucas_Thompson

There are couple of issues i want to cover. now we are using siteminder and all of these use-case are covered but we have problem when we switch to APM.

APM mode: as oauth client

  1. Application must redirect to login page after inactivity timeout. after apm integration need a browser refresh from user to redirect back to login page. 
  2. Timeout message or auto refresh for SSO login page, now sso login page is not refreshing or updating if the page is idle, this behavior leads to failed response from APM

Thanks for your response and support

Lucas_Thompson's avatar
Lucas_Thompson
Icon for Employee rankEmployee
Aug 21, 2024

Great, thanks for the additional detail.

For both of these, do you know how they operate in your current Siteminder deployment? Does the Siteminder inject javascript timeout warnings or somehow cause the app to refresh or update? Does the app hold a different configuration that causes the redirect? Web apps have various mechanisms to do these kinds of functions, unfortunately there is no "standard way" to do it, so each web app is unique.

 

  • sinum's avatar
    sinum
    Icon for Altostratus rankAltostratus
    Aug 22, 2024

    Lucas_Thompson  as per our admin siteminder policy server maintain the session based on the activity time timeout will trigger based on last activity time