SAML Assertions issued by the DualShield SSO include the AuthnStatement SessionNotOnOrAfter attribute. The value of this attribute is set by the option "Always close sessions after N minutes" in the associated session policy.

    <saml2:AuthnStatement AuthnInstant="2021-02-05T21:22:33.757Z" SessionIndex="08eb87d1-03d5-43d4-ab39-03f65208aebb" SessionNotOnOrAfter="2021-02-05T21:32:33.835Z">
      <saml2:AuthnContext>
        <saml2:AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</saml2:AuthnContextClassRef>
      </saml2:AuthnContext>
    </saml2:AuthnStatement>

The Service Provider can decide if it will use this attribute or not, and how it will use this attribute.


  • No labels