[keycloak-dev] Increase 'SSO Session Idle Timeout' on master realm

Stian Thorgersen stian at redhat.com
Wed Oct 22 12:53:21 EDT 2014



----- Original Message -----
> From: "Marek Posolda" <mposolda at redhat.com>
> To: "Stian Thorgersen" <stian at redhat.com>, "keycloak dev" <keycloak-dev at lists.jboss.org>
> Sent: Wednesday, October 22, 2014 5:23:06 PM
> Subject: Re: [keycloak-dev] Increase 'SSO Session Idle Timeout' on master realm
> 
> +1
> 
> Also we can update default settings of this timeout for newly created
> realms to 30 mins too? Seems to be good default also due that default
> httpSession timeout is 30 mins too on AS7 and Undertow afaik.

+1 To default for new realms

> 
> For long term, we still want to handle it in keycloak.js (use JS storage
> to temprarily persist values, so if you click to "Save Social provider"
> and your session is expired, you won't lose all values you previously
> filled) ?

It would be a nice feature. One thing I was worried about was if there's any sensitive data in the form (for example smtp credentials). Maybe we could do something clever like encrypting it, then send the encryption key as the state variable.

> 
> Marek
> 
> 
> On 22.10.2014 13:49, Stian Thorgersen wrote:
> > Working with the admin console you often get logged-out while doing
> > something (for example looking at documentation or configuring Google).
> >
> > I propose we increase 'SSO Session Idle Timeout' on the master realm and
> > new realms to 30 minutes.
> > _______________________________________________
> > keycloak-dev mailing list
> > keycloak-dev at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-dev
> 
> 


More information about the keycloak-dev mailing list