Session Management

This feature allows the Drupal session to end based on the lifetime of the IdP or OAuth provider token. In other words, the Drupal session will automatically terminate when the IdP token expires.

• After successfully performing the Test Configuration, go to the Client Configuration section and navigate to the Manage tab to locate your desired application.
• In the corresponding application row, click the dropdown arrow next to Attribute Mapping under the Mappings column, and select Client Settings.
• Within the Client Settings section, scrolldown to the Session Management.
• In the Session Management section, check Synchronize Drupal user session lifetime with IdP token expiry check box.
• Now, select the parameter key from the Select token expiry parameter dropdown in which token expiry parameter is received.
• Next, for What to do after token expiry?, select either Terminate Drupal user session upon expiry or Automatically renew token using the refresh token.
  • Terminate Drupal user session upon expiry: If you select this option, then the Drupal session will end when the IdP token expires.
  • Automatically renew token using the refresh token: This option will renew the IdP token using the refresh token, so your session will not terminate.
• Then, click the Save button.