ComponentSpace

Forums



AuthenticationTicket.ExpiresUtc not respecting NotOnOrAfter


AuthenticationTicket.ExpiresUtc not respecting NotOnOrAfter

Author
Message
lsiddiquee
lsiddiquee
New Member
New Member (8 reputation)New Member (8 reputation)New Member (8 reputation)New Member (8 reputation)New Member (8 reputation)New Member (8 reputation)New Member (8 reputation)New Member (8 reputation)New Member (8 reputation)

Group: Forum Members
Posts: 6, Visits: 17
We are using ComponentSpace SAML as authentication middleware in a .NET Core application. However, we are not able to set the AuthenticationTicket.ExpiresUtc to NotOnOrAfter SAML attribute. There is a feature in OIDC middleware in ASP.NET Core 'OpenIdConnectOptions.UseTokenLifetime' which can be used to respect the issues token lifetime. Is there any mechanism to do this in ComponentSpace or how to implement this as best practice.
ComponentSpace
ComponentSpace
ComponentSpace Development
ComponentSpace Development (4.4K reputation)ComponentSpace Development (4.4K reputation)ComponentSpace Development (4.4K reputation)ComponentSpace Development (4.4K reputation)ComponentSpace Development (4.4K reputation)ComponentSpace Development (4.4K reputation)ComponentSpace Development (4.4K reputation)ComponentSpace Development (4.4K reputation)ComponentSpace Development (4.4K reputation)

Group: Administrators
Posts: 3.2K, Visits: 11K
We don't support this in our middleware. The SAML assertion validity period (NotBerfore to NotOnOrAfter) usually is only a few minutes. The intention is that the SAML assertion is used to create a local authentication session whose expiry time usually is longer or sliding. The SAML assertion is short lived. The authentication session created from the SAML assertion normally is longer.

May I ask why you want to set the AuthenticationTicket.ExpiresUtc to NotOnOrAfter?

Regards
ComponentSpace Development
GO


Similar Topics


Execution: 0.000. 1 query. Compression Enabled.
Login
Existing Account
Email Address:


Password:


Select a Forum....












Forums, Documentation & Knowledge Base - ComponentSpace


Search