adal - OWIN: Issue with System.IdentityModel.Services, CookieHandler session cookie timeout, and no ability to secure session cookie -
listed below web.config file 4.5.1 .net mvc application.
<system.identitymodel.services> <federationconfiguration> <wsfederation passiveredirectenabled="true" issuer=https://tenant.com/app/template_wsfed/somenumber/sso/wsfed/passive realm="http://local.tenant.com/clientportal/" requirehttps="false" /> <cookiehandler name="somenumber" persistentsessionlifetime="0:0:2" requiressl="false" /> </federationconfiguration>
- setting persistentsessionlifetime attribute on cookiehandler not having affect on cookie , not allowing expire
- trying secure cookie setting requiressl true throws error
cannot authenticate user because url scheme not https , requiressl set true in configuration, therefore authentication cookie not sent. change url scheme https or set requiressl false on cookiehandler element in configuration
this large enterprise utilizing f5 big-ip platform ssl off-loader has ssl certificates , handles network traffic.
how can obtain control of session cookie timeout , have ability secure session cookie when off-loader in between handling ssl traffic , sending web servers non-ssl traffic?
Comments
Post a Comment