APM Inactivity Timer(s)
I have a quick question regarding timers and APM. I recently deployed a SAML iDP solution for our SharePoint environment. When I was setting it up to begin with the timers were initially based on the http session (browser window). If the browser was closed the timer expired, but as long as it was open the session was good. Then I ran into some issues where users couldn't open up documents in thick clients (word, excel, etc) from the document libraries. I did some digging and found an irule on devcentral (that is apparently in a deployment guide) that addressed this. However it basically setup persistent cookies so that the cookies could be shared between the browser and thick clients. Once I did that the issue I ran into was that when a user closed their browser their session didn’t time out for 15 minutes (which happens to be the default inactivity timeout in the access profile), which created some security concerns with regards to users and public computers. So I went ahead and set the inactivity timer in the access profile to 60 seconds, this way if a user closes their browser it will time out within 60 seconds, however this also means that if they have their browser open but aren't doing anything that the session times out in 60 seconds, which is causing some issues. The problem that I have is that when users go into sharepoint and are doing certain activities (like editing a document) their session times out before they are done editing it, and then that creates issues when they try to check the document back in, etc. So my question is this, is there a way to keep the session alive as long as the browser is open (as it was before I added the irule that setup persistent cookies)? I was working with tcp keepalives and idle timeouts in the tcp profile, but haven’t had any luck. My ideal scenario would be to have a users session active as long as the browser window is open (unless there is no activity for a long amount of time…like 30 minutes), but to close the session relatively quickly if the actual browser window is closed. Any assistance would be greatly appreciated. this is the irule that I am using: