SP 2010 FBA: Logging out when closing the browser works fine but it broke the Session Security Token Expiration

Question

Hi,

As per the below link we can make either 'Logging out when closing the browser' or 'Session Security Token Expiration' to work.

http://e-junkie-chronicles.blogspot.in/2011/12/sharepoint-2010-fba-and-logging-out.html#!/2011/12/sharepoint-2010-fba-and-logging-out.html

I am already using the 'Session Security Token Expiration' to automatically sign out after a given time. This works great.

I also have the requirement to logout when closing the browser along with Session Security Token Expiration.

So I have added the IsPersistent = false line just after the ReissueCookie = true as you have mentioned.

Now what happened was 'Logging out when closing the browser' works fine but it broke the Session Security Token Expiration and it never expires.

Do you have a solution for this?

Thanks,
Arshath

Answer 1

Hi,

Thanks for sharing the post.

I’m trying involve someone familiar with this topic to further look at this issue.

Thanks,

---

Qiao Wei

TechNet Community Support

Answer 2

Hi Qiao,

Thanks and expecting your support on this.

Thanks,

Arshath

---

L. Arshath

Answer 3

Hello Arshath,

To ensure the user session is no longer valid after browser is closed is use Session cookie instead of persist cookie. Please see the following link:

http://msdn.microsoft.com/en-us/library/hh147183.aspx

$sts = Get-SPSecurityTokenServiceConfig
$sts.UseSessionCookies = $true
$sts.Update()
iisreset

thanks,

Amy