
RubensF.60365 (Customer) asked a question.
Our application receives a POST with a SAML token and validates it (IdP initiated SSO).
How can we periodically check if the user session is still active on the Okta side?
The session API documentation mentions a "sessionToken", but this token only contains a "sessionIndex" (like "id1660851400516.147903881).

Hi @RubensF.60365 (Customer),
Thank you for posting on the Okta community page!
I have done some research and you can use the Okta API call Get Session to check if the user in question has an active session or not. I have provided bellow a documentation about Sessions API that might be useful for your use case:
If the user session is valid then a Session object is returned and if it's not, then a 404 Not Found response is returned.
On another note, the Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.
Hey Flaviu, thanks for your reply.
As I mentioned, can't use the sessionIndex that I received in the SAML token: