ADFS reauthenticating an MVC request after a certain time period

Question

I am working on a Claims aware ASP.NET MVC application. The authentication is done via Active Directory Federation Services. The ADFS server has a time out of 8 hours. At the application level I elevated the session time out and App pool idle time to 3 hours. But still if the user was inactive for 30 min the ADFS server reauthenticates the user. Why is that happening? What do I need to set that I am not setting. Any help regarding this will be highly appreciated.

Thanks!

Vinita

Answer 1

There are a number of Powershell cmdlets for ADFS that may help you.

Get-AdfsProperties

has a property SsoLifetime. What is it set to?

Use

Set-AdfsProperties

to update it.

To see the full list, use

get-command *adfs*

If you can't see the cmdlets, see here.

Essentially, you need to run this cmdlet first:

Add-PSSnapin Microsoft.Adfs.PowerShell

(And you normally need to run Powershell in admin. mode).