Hi,

I have simplesaml setup in my drupal 8 project. I am using sql type session. Everything seems working fine. Assertions are being captured and users are able to login. But my problem is users get auto logged out every 90 seconds. This is stored in simplesaml_saml_LogoutStore table. This happens only for saml users. Is there any way I can avoid auto logout? I thought drupal session would be used after user is validated through saml.

config.php:
---------
$config['store.type'] = 'sql';
$config['session.cookie.secure'] = true;
$config['enable.authmemcookie'] = false;
$config['session.cookie.name'] = 'PHPSESSID';

Comments

CIsSharp created an issue.

diamondsea’s picture

diamondsea
he/him/his
Primary language English
CreditAttribution: diamondsea as a volunteer commented

We ran into this issue as well. While I don't have a true solution, we found a workaround.

The problem for us seemed to be that if a user is automatically provisioned by SAML but has no roles assigned, the IsAuthenticated() check fails (even though it is an authenticated user, it seems to fail the check if they have no other roles assigned).

Our workaround was to add a generic role (like "SAML_Authenticated") that we assign to all SAML users as they are logged in, which prevents the IsAuthenticated() check from failing improperly.

We suspect that the 90 second timout is coming from our SAML IdP which expires auth tokens after 90 seconds on the IdP side, but haven't had time to dig into it beyond what I've posted here.

Hope this helps!

Eunicia Estrocio’s picture

Eunicia Estrocio CreditAttribution: Eunicia Estrocio commented

We are facing a similar issue with version 8.0-3.1 of this module. Is there a solution to prevent session timeout? What does the "SAML_Authenticated" role do?

diamondsea’s picture

diamondsea
he/him/his
Primary language English
CreditAttribution: diamondsea as a volunteer commented

The SAML_Authenticated role did nothing and had no permissions. We added it only to assign a newly logged in SAML user a role, because login authentication was failing for users with no assigned roles.

This was 4 years ago and on a project I no longer have access to, and I'm not sure if this is still an issue or not.

robertragas’s picture

robertragas CreditAttribution: robertragas at Open Social commented

Also experiencing the exact same issue. The workaround still works, but you do need to add the new role as Local authentication under "Which ROLES should be allowed to login with local accounts?" otherwise the drupal session will still get destroyed and log you out.

Edit:
In our case it had to do with some of the cookie lifetime settings set to 0, which means they get destroyed as soon as the browser closes.

PCate’s picture

PCate CreditAttribution: PCate as a volunteer commented

In our case it had to do with some of the cookie lifetime settings set to 0, which means they get destroyed as soon as the browser closes.

@robertragas, can you share the specific cookie settings you needed to change? Also, even with the cookie change did you still need to assign a role other than "Authenticated"?