SAK-41298 Document maxAuthenticationAge property for SAML auth (sakai…

…project#6525) * SAK-41298 Document maxAuthenticationAge property for SAML auth * Update xlogin-context.saml.adfs-prod.xml SAK-41298 Update the ADFS max auth age to 86400 (1 day) as ADFS sets this to the time of first login
fk-snyk · Feb 5, 2019 · 03a98d6 · 03a98d6
1 parent 4d7669b
commit 03a98d6
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/login/login-tool/tool/src/webapp/WEB-INF/xlogin-context.saml.adfs-prod.xml b/login/login-tool/tool/src/webapp/WEB-INF/xlogin-context.saml.adfs-prod.xml
@@ -216,7 +216,11 @@
     </bean>
 
     <!-- SAML 2.0 WebSSO Assertion Consumer -->
-    <bean id="webSSOprofileConsumer" class="org.springframework.security.saml.websso.WebSSOProfileConsumerImpl"/>
+    <bean id="webSSOprofileConsumer" class="org.springframework.security.saml.websso.WebSSOProfileConsumerImpl">
+        <!-- Duration in seconds after initial authentication with the IDP that SSO login will be allowed: see
+             https://docs.spring.io/spring-security-saml/docs/current/reference/html/configuration-advanced.html#time-interval -->
+        <property name="maxAuthenticationAge" value="86400"/>
+    </bean>
 
     <!-- SAML 2.0 Holder-of-Key WebSSO Assertion Consumer -->
     <bean id="hokWebSSOprofileConsumer" class="org.springframework.security.saml.websso.WebSSOProfileConsumerHoKImpl"/>

diff --git a/login/login-tool/tool/src/webapp/WEB-INF/xlogin-context.saml.xml b/login/login-tool/tool/src/webapp/WEB-INF/xlogin-context.saml.xml
@@ -272,7 +272,11 @@
     </bean>
 
     <!-- SAML 2.0 WebSSO Assertion Consumer -->
-    <bean id="webSSOprofileConsumer" class="org.springframework.security.saml.websso.WebSSOProfileConsumerImpl"/>
+    <bean id="webSSOprofileConsumer" class="org.springframework.security.saml.websso.WebSSOProfileConsumerImpl">
+        <!-- Duration in seconds after initial authentication with the IDP that SSO login will be allowed: see
+	     https://docs.spring.io/spring-security-saml/docs/current/reference/html/configuration-advanced.html#time-interval -->
+	<property name="maxAuthenticationAge" value="7200"/>
+    </bean>
 
     <!-- SAML 2.0 Holder-of-Key WebSSO Assertion Consumer -->
     <bean id="hokWebSSOprofileConsumer" class="org.springframework.security.saml.websso.WebSSOProfileConsumerHoKImpl"/>