adal - OWIN: Issue with System.IdentityModel.Services, CookieHandler session cookie timeout, and no ability to secure session cookie -


listed below web.config file 4.5.1 .net mvc application.

 <system.identitymodel.services>     <federationconfiguration>         <wsfederation passiveredirectenabled="true" issuer=https://tenant.com/app/template_wsfed/somenumber/sso/wsfed/passive realm="http://local.tenant.com/clientportal/" requirehttps="false" />         <cookiehandler name="somenumber" persistentsessionlifetime="0:0:2" requiressl="false" />     </federationconfiguration> 

  1. setting persistentsessionlifetime attribute on cookiehandler not having affect on cookie , not allowing expire
  2. trying secure cookie setting requiressl true throws error

cannot authenticate user because url scheme not https , requiressl set true in configuration, therefore authentication cookie not sent. change url scheme https or set requiressl false on cookiehandler element in configuration

this large enterprise utilizing f5 big-ip platform ssl off-loader has ssl certificates , handles network traffic.

how can obtain control of session cookie timeout , have ability secure session cookie when off-loader in between handling ssl traffic , sending web servers non-ssl traffic?


Comments

Popular posts from this blog

node.js - Node js - Trying to send POST request, but it is not loading javascript content -

javascript - Replicate keyboard event with html button -

javascript - Web audio api 5.1 surround example not working in firefox -