HTTPSession Max TimeOut [英] HTTPSession Max TimeOut

问题描述

我们有一个通过互联网托管的网站。我们还将SSO与CA SiteMinder集成。 

We have a website that is hosted over Internet. We have also SSO integrated with CA SiteMinder. 

我们已指定SiteMinder结束时设置的最长超时时间为30分钟。 

We have specified 30 mins max timeout set from SiteMinder end. 

现在我的查询是：

登录网站后，已为该用户创建HttpSession以访问网站中的受限资源。一旦30分钟消失，从Site Minder结束，已经调用超时。但是从网站结束，HttpSession还不清楚。

After login to the website, HttpSession has been created for that user to access the restricted resources in website. Once 30 mins have been gone, From Site Minder end, time out has been called. But from Website end, HttpSession has not been clear.

几分钟后，如果某些用户使用相同的浏览器&登录到屏幕，然后用户获取上一个用户详细信息的所有详细信息。

After few mins, if some user using same browser & login to the screen, then later user getting all the details of the previous user's details.

我们无法将HttpSession clear与SiteMinder超时事件同步。

We are not able to synch the HttpSession clear with SiteMinder timeout event.

当用户单击Logout清除会话时，我们可以处理此问题。但不是上述情况。

We are able to handle this when user click on Logout to clear the session. But not in the above scenario.

请帮忙......

谢谢

推荐答案

您好Srivastava， 



由于CA SiteMinder是第三方产品，我建议您可以在相应的论坛中创建一个帖子，您将从那里获得更多信息，更多专家会帮助您。$


感谢您的理解。



最好的问候， 



Lisa Chen 

Hi Srivastava, 

As CA SiteMinder is a third party product, I would suggest you can create a thread in corresponding forum, you will get more information from there and more experts there will help you.

Thanks for your understanding.

Best Regards, 

Lisa Chen 

这篇关于HTTPSession Max TimeOut的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！