Change assertion expiry date?

Question

Change assertion expiry date?

Closed this issue 4 years ago · 3 comments

Hi,

I would like to change the assertion expiry date created by the IdP. The value of saml:Assertion/saml:Conditions/@NotOnOrAfter is currently about 5 minutes in the future. Is there a way to achieve this?

Answer 1 · 2021-01-13T11:03:51.000Z

I had a similar request. I ended up overriding the config.php file

./saml-config.php:/var/www/simplesamlphp/config/config.php

Then in the config there is a session.duration property which I changed.

Answer 2 · 2021-01-14T16:32:40.000Z

I don't think session.duration is the property to change. Its value is

8 * (60 * 60), // 8 hours.

not 5 minutes.

Answer 3 · 2021-02-05T15:43:03.000Z

I could modify the assertion expiry date (@NotOnOrAfter) by setting

'assertion.lifetime' => 3600,

in metadata/saml20-sp-remote.php.

However, I'm not sure whether this works with the version of simplesamlphp currently used in docker-test-saml-idp, because I updated it to 1.19.0 previously.