<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y000088TCCZSA4Okta Classic EngineOkta Integration NetworkAnswered2024-04-16T13:48:28.000Z2020-03-31T14:28:43.000Z2020-04-02T07:13:16.000Z

saddamh.63014 (Customer) asked a question.

How to check the validity of SAML token

Hi All, We have used Okta Sign in to authenticate user via SAML in Rails application. i am curious to know for how long the user's authentication is valid? for example if the user has logged in with OKTA first time when should i expire his session to re authenticate with OKTA? do we get any parameters inside the response for validity of login?


  • 8n9yw (8n9yw)

    user session in apps are controlled by the app. the okta is controlled by the logon policy but it does not log you out of the apps you are in.

  • Pl√°cidoE.89677 (Santalucía, S.A., Compañía de Seguros y Reaseguros)

    Hi Saddam

     

    As a first step please go to Security -> HealthInsight to check the current configuration on your Org.

     

    /help/servlet/rtaImage?refid=0EM1Y0000012ESv

     

    Then check the following link from Okta Help Center, where you'll find enough information to proceed as per your needs

     

     

    Regarding your specific question about the information into SAML response that would be used on SP side to ensure that IdP AuthN is correct and there is no issue with authentication.

     

    Feel free to update here to get further inputs just in case.

     

    Best regards.

     

     

    NOTE: If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer". 

    Expand Post
  • saddamh.63014 (Customer)

    Thanks Plácido and Phil to answer my question but i would like to know how frequently i should expire the user's session and ask user to re authenticate with OKTA? is there any parameter inside the response regarding the session validity?

This question is closed.
Loading
How to check the validity of SAML token