Your suggested change has been received. Thank you.

close
Thales Logo

All

  • All
  • CipherTrust Manager
  • CipherTrust Application Data Protection (CADP)
  • CipherTrust Application Key Management (CAKM)
  • CipherTrust Batch Data Transformation (BDT)
  • CipherTrust Cloud Key Management (CCKM)
  • CipherTrust Data Discovery and Classification (DDC)
  • CipherTrust Data Protection Gateway (DPG)
  • CipherTrust Database Protection (CDP)
  • CipherTrust Intelligent Protection (CIP)
  • CipherTrust Integrations
  • CipherTrust Migrations
  • CipherTrust RESTful Data Protection (CRDP)
  • CipherTrust Transparent Encryption (CTE)
  • CipherTrust Transparent Encryption Userspace (CTE-U)
  • CipherTrust Secrets Management (CSM)
  • CipherTrust Vaulted Tokenization (CT-V)
  • CipherTrust Vaultless Tokenization (CT-VL)
  • CTE-Linux
  • CTE-Windows
  • CTE-AIX
  • CTE-K8s
  • CTE-U
  • Crypto Command Center
  • Data Protection on Demand
  • Luna Cloud HSM
  • Luna Network HSM
  • Luna PCIe HSM
  • Luna USB HSM
  • OneWelcome Identity Platform
  • ProtectApp LUKS
  • ProtectServer 2 HSM
  • ProtectServer 3 HSM
  • SafeNet Trusted Access (STA)
  • SafeNet MobilePASS+
  • SafeNet MobilePASS+ for Android
  • SafeNet MobilePASS+ for Chrome
  • SafeNet MobilePASS+ for macOS
  • SafeNet MobilePASS+ for iOS
  • SafeNet MobilePASS+ for WatchOS
  • SafeNet MobilePASS+ for Windows
  • SafeNet Synchronization Agent
  • SafeNet Logging Agent
  • SafeNet Agent for FreeRADIUS
  • SafeNet Agent for NPS
  • SafeNet Agent for Windows Logon
  • SafeNet Authentication Service Private Cloud Edition (SAS PCE)
  • SafeNet Remote Logging Agent
  • SafeNet Keycloak Agent
  • SafeNet IDPrime Virtual (IDPV)
  • SafeNet FIDO Key Manager
  • SafeNet FIDO Key Manager for Android
  • SafeNet FIDO Key Manager for iOS
  • SafeNet FIDO Key Manager for Windows
back

Server and agent settings

Single sign-on session timeout

search
printsuggest an editpdf paneldownload

Single sign-on session timeout

A STA single sign-On (SSO) session exists only in the context of a browser instance and starts when a user successfully accesses an application using STA. If a user concurrently accesses applications from different browser sessions, then the user will have a distinct SSO session for each of those browser sessions.

note

Note

The application session is not controlled by the SSO session timeout.

You can define the maximum time between two successive application access attempts before STA ends the session.

copy link to clipboardUser view

Depending on the policy settings and whether the SSO session already exists, user access requests are processed as shown in the following figure.

alt_text

note

Note

STA is invoked when the user logs out from an application that is part of their SSO session. In the case of SAML, this happens only if the standard SAML logout protocol is used.

STA does not monitor the SSO session nor react to changes to the context; for example, a change of IP address for the user during the SSO session.

copy link to clipboardSSO session termination

A STA SSO session ends when any of the following occur:

  • The user closes their browser session.

    Exception: If the browser is set to auto-restore, the session continues when the browser re-opens.

  • The user logs out of an application that is part of the SSO.

    Exception: If the application does not support SAML logout, the session continues.

  • The user does not initiate an access attempt before the SSO Session Timeout setting is reached.

  • The maximum total duration of the SSO session (8 hours) is reached. This maximum is not configurable.

  • The session has been terminated by the session termination API.

When a STA SSO session ends, the user remains logged on to their applications. However, when they next attempt to access an application, STA initiates a new SSO session.

copy link to clipboardConfigure the SSO session timeout

You can define the maximum time between two successive application access attempts before STA ends the session.

To configure the SSO session timeout period:

  1. On the STA Access Management console, select the Settings tab, select Session Timeout and then select Edit.

  2. Click within the field provided and select the value that meets your organization's requirements.

    The values supported by STA are: 15, 30, 45, or 60 minutes; as well as 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, or 12 hours.

  3. Click Save.

On this page