SPS API session timeout

Hi,

could you please confirm that the Web Session Timeout is the same for both Web Sessions and API sessions on SPS?

For example:

We want to retrieve audits from SPS and we can do it in 2 ways: downloading them from the Web Interface or by calling APIs.

By default Web session interface timeout is set to 10 minutes, so if i try and download an audit from the web console and i will go idle, after 10 minutes the download will stop because i will be disconnected.

Is it the same if i use the APIs? So i log with my terminal to the SPS APIs and i start downloading audits from there. Will i be disconnected after 10 minutes being idle or is there another variable that manages the API session timeout?

Feel free to ask for more informations if i didn't make myself clear.

Thank you,

Simone

0 Tawfiq.Ahmad 1 month ago

Hi Simone,

Are you aware that the timeout is configurable for the Web UI as per the admin guide here:

https://docs.oneidentity.com/bundle/safeguard-for-privileged-sessions_administration-guide_8.0/page/guides/shared/shared-topics/web-session-timeout.htm

https://support.oneidentity.com/one-identity-safeguard-for-privileged-sessions/kb/4219066/how-can-the-timeout-for-the-sps-web-gui-be-changed

Thanks!
Cancel
Up 0 Down

Reply

Verify Answer

Cancel
0 simone tabacchi 1 month ago in reply to Tawfiq.Ahmad

Hello Tawfiq,

yes i am, but there the guide talks about Web session, nothing is said about APIs session.

That's why i asked for a confirmation that this value manages APIs too.

So do you confirm that?

Thank you,

Simone
Cancel
Up 0 Down

Reply

Verify Answer

Cancel
0 Tawfiq.Ahmad 1 month ago in reply to simone tabacchi

I found a reference in older guides 6.x which stated that it was the case yes

" Session timeout, in minutes. SPS terminates sessions that are idle for this period. This setting applies sessions that access the SPS web interface and the SPS REST interface."

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-sessions/6.9.5/rest-api-reference-guide/6#TOPIC-1959469

However, that information is no longer found in later version guides so it would be best to have this confirmed via a service request unless you have a way to test against the REST API with a lower 5 minute Web Interface Session timeout to verify?

Thanks!
Cancel
Up 0 Down

Reply

Verify Answer

Cancel
0 simone tabacchi 1 month ago in reply to Tawfiq.Ahmad

Thank you Tawfiq,

i will open an SR then.

Thank you again!
Cancel
Up 0 Down

Reply

Verify Answer

Cancel