If a user session is active on the service provider, the service provider periodically sends session synchronization to Identity Server to maintain the session. You must configure properties for the session synchronization between service provider and target identity provider.
On the Home page, click Applications > Select a Cluster > SAML2 IDP application > Options > Plus icon.
Select Other in Property Type.
Specify the following values:
|
Field |
Description |
|---|---|
|
Property Name |
Name of the property. For example, config.aselect.sessionsync.enabled |
|
Property Value |
True |
For session synchronization, add two options, one to enable the session synchronization and the other to provide the URL to which synchronization message must be sent.
The session synchronization message is sent from the Access Manager service provider to the A-Select identity provider, in tandem with Access Gateway ESP's activity update. The session synchronization message is sent only if the user session is active at Access Gateway portal, which is the ESP to the Access Manager service provider. If you log in directly to the Access Manager service provider, even if the session is active, the session synchronization message is not sent to the A-Select identity provider.
Click Save.
Update Identity Server.