After a user session times out, instead of a redirect to the login page, the session-timeout page is displayed. How do I resolve that error?
This is normal behavior, not an error. After a session timeout, if the purge delay time has not elapsed, the session stays in the session table in the timed-out stage. During that time, a session-timeout page is displayed. Once the purge delay time has elapsed, Access Manager deletes the session from the session table and redirects you to the login page. You can modify the purge delay time (60 minutes by default) by changing the value of the com.iplanet.am.session.purgedelay parameter in the AMConfig.properties file. After a session times out, the purge delay time is the extended period for which the token resides in the Session Service. The session token is in INVALID state during this period. After this time period has elapsed, the session terminates. In addition, by means of the SSO APIs, the client application can use the value of this time period to check whether the session has timed out.
Related Questions
- After a user session times out, instead of a redirect to the login page, the session-timeout page is displayed. How do I resolve that error?
- I want my servlet page to redirect to a login page if the session has timed out. How can I know if my session has timed out?
- Is it really required to redirect the user to a new page after login?
