<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Thanks Nate.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have set the following properties in idp.properties<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">idp.cookie.maxAge = 100<o:p></o:p></p>
<p class="MsoNormal">idp.storage.htmlLocalStorage = true<o:p></o:p></p>
<p class="MsoNormal">idp.session.enabled = true<o:p></o:p></p>
<p class="MsoNormal">idp.session.StorageService = shibboleth.ClientPersistentStorageService<o:p></o:p></p>
<p class="MsoNormal">idp.session.timeout = PT60M<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Is there anything else I need to set for IDP Persistent cookies.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal"><span style="color:#1F497D">Thanks & Regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Sushanth Vadaram<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b>From:</b> users <users-bounces@shibboleth.net> <b>On Behalf Of
</b>Vadaram, Sushanth via users<br>
<b>Sent:</b> Tuesday, December 8, 2020 11:28 AM<br>
<b>To:</b> Nate Klingenstein <ndk@signet.id>; Shib Users <users@shibboleth.net><br>
<b>Cc:</b> Vadaram, Sushanth <Sushanth.Vadaram@carrier.com><br>
<b>Subject:</b> [External] RE: Not able to persist session idp cookies<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoPlainText"><img width="614" height="148" style="width:6.3958in;height:1.5416in" id="Picture_x0020_1" src="cid:image001.png@01D6CD72.4E638880"><o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Expires is set as session and not some time. Is there any way this can be changed from session to some time.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Thanks & Regards,<o:p></o:p></p>
<p class="MsoPlainText">Sushanth Vadaram<o:p></o:p></p>
<p class="MsoPlainText">+91-9154096280<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">-----Original Message-----<br>
From: Nate Klingenstein <<a href="mailto:ndk@signet.id">ndk@signet.id</a>> <br>
Sent: Tuesday, December 8, 2020 10:56 AM<br>
To: Shib Users <<a href="mailto:users@shibboleth.net">users@shibboleth.net</a>><br>
Cc: Vadaram, Sushanth <<a href="mailto:Sushanth.Vadaram@carrier.com">Sushanth.Vadaram@carrier.com</a>><br>
Subject: [External] RE: Not able to persist session idp cookies<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Sushanth,<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">> We are seeing that once after successful login and closure of the browser. We are again asked to login when we close the browser.<o:p></o:p></p>
<p class="MsoPlainText">> <o:p></o:p></p>
<p class="MsoPlainText">> We did set the idp.session in idp.properties but cookie wasn’t setting the cookie max-age. The value is still session which might be the reason why the session is not getting restored.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">I suspect it's because the Cache-Control attributes of the cookie are being set to no-cache and no-store. I'm not aware of a way to configure the specific flags of the cookie without touching the code, though it may be possible.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><a href="https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fnam11.safelinks.protection.outlook.com%2F%3Furl%3Dhttps*3A*2F*2Furldefense.com*2Fv3*2F__https*3A*2F*2Fdeveloper.mozilla.org*2Fen-US*2Fdocs*2FWeb*2FHTTP*2FHeaders*2FCache-Control__*3B!!MvWE!XcV15O3SGWrSNRBmvCgN6rSJvIyL-EQ9NqWXR4NFTibbjXv3xP-YHJGecq1Ir5IVQIwq*24%26data%3D04*7C01*7CSushanth.Vadaram*40carrier.com*7Cd787b10f2d784abf869f08d89b39b8cd*7C36839a657f3f4bac9ea4f571f10a9a03*7C0*7C0*7C637430019495281959*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000%26sdata%3Drr9wlFIrjCxSfTUQzg15zVGeds*2BOrdQtaKQmI2fQyLU*3D%26reserved%3D0__%3BJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUl!!MvWE!TIaV7V_ANMv3KFgvC9ZXARrJc9RCG0y2iba9aREwShA_XW44COA39cIDs9Qy6UbaEmY3%24&data=04%7C01%7CSushanth.Vadaram%40carrier.com%7Cb4e5b3b6a77341cba5b108d89b3e3287%7C36839a657f3f4bac9ea4f571f10a9a03%7C0%7C0%7C637430038718854792%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=MhadegDyN1rwlQdru8%2BdECpoTI47UU4CPcTuspRb7Do%3D&reserved=0"><span style="color:windowtext;text-decoration:none">https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fdeveloper.mozilla.org%2Fen-US%2Fdocs%2FWeb%2FHTTP%2FHeaders%2FCache-Control__%3B!!MvWE!XcV15O3SGWrSNRBmvCgN6rSJvIyL-EQ9NqWXR4NFTibbjXv3xP-YHJGecq1Ir5IVQIwq%24&data=04%7C01%7CSushanth.Vadaram%40carrier.com%7Cd787b10f2d784abf869f08d89b39b8cd%7C36839a657f3f4bac9ea4f571f10a9a03%7C0%7C0%7C637430019495281959%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=rr9wlFIrjCxSfTUQzg15zVGeds%2BOrdQtaKQmI2fQyLU%3D&reserved=0</span></a>
<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">Maybe someone else on the list has a better idea, Nate.<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText">--------<o:p></o:p></p>
<p class="MsoPlainText">Signet, Inc.<o:p></o:p></p>
<p class="MsoPlainText">The Art of Access ®<o:p></o:p></p>
<p class="MsoPlainText"><o:p> </o:p></p>
<p class="MsoPlainText"><a href="https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fnam11.safelinks.protection.outlook.com%2F%3Furl%3Dhttps*3A*2F*2Furldefense.com*2Fv3*2F__https*3A*2F*2Fwww.signet.id__*3B!!MvWE!XcV15O3SGWrSNRBmvCgN6rSJvIyL-EQ9NqWXR4NFTibbjXv3xP-YHJGecq1Ir1YkY8pc*24%26data%3D04*7C01*7CSushanth.Vadaram*40carrier.com*7Cd787b10f2d784abf869f08d89b39b8cd*7C36839a657f3f4bac9ea4f571f10a9a03*7C0*7C0*7C637430019495281959*7CUnknown*7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0*3D*7C1000%26sdata%3D3ohXcqK6T*2Fv3GwqfkYpuf*2B9f0t4EXTubUtECsi9c5oY*3D%26reserved%3D0__%3BJSUlJSUlJSUlJSUlJSUlJSUlJSUlJSUlJQ!!MvWE!TIaV7V_ANMv3KFgvC9ZXARrJc9RCG0y2iba9aREwShA_XW44COA39cIDs9Qy6WBljT_0%24&data=04%7C01%7CSushanth.Vadaram%40carrier.com%7Cb4e5b3b6a77341cba5b108d89b3e3287%7C36839a657f3f4bac9ea4f571f10a9a03%7C0%7C0%7C637430038718864785%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=Yqdho7y%2B7yeo63x%2B7CBwUxOTtZ6Kw84BWGmNBbB5vqc%3D&reserved=0"><span style="color:windowtext;text-decoration:none">https://nam11.safelinks.protection.outlook.com/?url=https%3A%2F%2Furldefense.com%2Fv3%2F__https%3A%2F%2Fwww.signet.id__%3B!!MvWE!XcV15O3SGWrSNRBmvCgN6rSJvIyL-EQ9NqWXR4NFTibbjXv3xP-YHJGecq1Ir1YkY8pc%24&data=04%7C01%7CSushanth.Vadaram%40carrier.com%7Cd787b10f2d784abf869f08d89b39b8cd%7C36839a657f3f4bac9ea4f571f10a9a03%7C0%7C0%7C637430019495281959%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=3ohXcqK6T%2Fv3GwqfkYpuf%2B9f0t4EXTubUtECsi9c5oY%3D&reserved=0</span></a>
<o:p></o:p></p>
</div>
</body>
</html>