Configuration Guides › Federation Security Services Guide › Configure SOA Security Manager as a SAML 1.x Producer › Setting Up Sessions for a SAML Affiliate Agent Consumer (optional)

Setting Up Sessions for a SAML Affiliate Agent Consumer (optional)

To configure sessions for a site using the SAML Affiliate Agent as the consumer, be aware of the following:

• Session management is configured only if the SAML Affiliate Agent is acting as a SAML consumer. The SAML credential collector does not support this feature.
• The SAML Affiliate Agent does not support SAML POST profile. Sessions can only be used with SAML artifact profile.

Session management between a producer and a SAML Affiliate Agent can be handled in one of three ways:

Default

Producer and SAML Affiliate Agent maintain separate sessions.

Both the producer and the SAML Affiliate Agent establish sessions for the user. If a user idles out or reaches a timeout at the producer, the SAML Affiliate Agent is not notified. The same is true for a session that expires at the SAML Affiliate Agent.

Active

An active session is required at the producer.

Both the producer and SAML Affiliate Agent establish sessions. An active session is required at the producer for the SAML Affiliate Agent session to stay active. Producer sessions can remain active after a SAML Affiliate Agent session is terminated.

Shared

Producer and SAML Affiliate Agent maintain shared sessions.

If the SAML Affiliate Agent has implemented a shared-session model, the producer and the SAML Affiliate Agent can maintain a shared session. When the producer session expires, or the user logs out at either site, sessions at the producer and the SAML Affiliate Agent are terminated

Note: For more information about session management, see the SiteMinder SAML Affiliate Agent Guide.