IBM Verify

IBM Verify

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Need to kill backend session upon inactivity logout of weseal

    Posted Tue February 18, 2020 09:14 AM
    Hi All,

    ISAM 9.0.6

    We have a new requirement at one of our client. 

    If a user completes his inactivity timeout session he will be logout from isam. but the requirement here is to kill the session on the backend server(Application integrated with isam) on the inactivity timeout of user.

    Can this be achieved  ?

    ------------------------------
    Rahil Anwar
    ------------------------------


  • 2.  RE: Need to kill backend session upon inactivity logout of weseal

    Posted Tue February 18, 2020 10:28 AM

    Hello,

    Check this out: https://www.ibm.com/support/knowledgecenter/SSPREK_9.0.7/com.ibm.isam.doc/wrp_config/task/tsk_conf_single_signoff.html

    Note that to use this, backend cookies must be configured in the cookie jar of WebSEAL. 


    Jon. 



    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


  • 3.  RE: Need to kill backend session upon inactivity logout of weseal

    Posted Tue February 18, 2020 10:31 AM
    Hi Harry,

    Note that to use this, backend cookies must be configured in the cookie jar of WebSEAL 

    Can you please provide more information regarding this. 

    Any example configuration snapshots..

    Thanks and Regards,
    Rahi

    ------------------------------
    Rahil Anwar
    ------------------------------

    Original Message


  • 4.  RE: Need to kill backend session upon inactivity logout of weseal

    Posted Tue February 18, 2020 10:40 AM
    Hello,

    i don't have examples but it is written up in the docs:

    https://www.ibm.com/support/knowledgecenter/SSPREK_9.0.1/com.ibm.isam.doc/wrp_config/concept/con_mgng_cookies.html

    Jon.

    ------------------------------
    Jon Harry
    Consulting IT Security Specialist
    IBM
    ------------------------------

    Original Message


  • 5.  RE: Need to kill backend session upon inactivity logout of weseal

    Posted Thu February 20, 2020 08:25 AM
    #-----------------------------
    # BACK-END SERVER SINGLE SIGN-OFF
    #-----------------------------
    # When a user's session is terminated in WebSEAL, any sessions that may exist
    # on back-end application servers are not destroyed. When this item is
    # configured, WebSEAL will send a request to the configured URI's including
    # any configured headers and cookies for the junction point on which it resides.
    # The backend application can use this information to terminate any sessions
    # for that user.
    #
    # Multiple URI's can be specified by including multiple single-sign-off-uri
    # configuration entries.
    #
    # The configured URI must reside on a standard junction. For example:
    # single-sign-off-uri = /app/logout.asp
    #
    single-signoff-uri = /JN/do_logout.jsp

    ------------------------------
    UsmanAli Shaik
    ------------------------------

    Original Message


Related Content