Increase timeout for RSA Authentication Agent for Web for IIS implemented for OWA

[#1]

Article Number

000037627

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Agent for Web for IIS
RSA Version/Condition: 8.x
 

Issue

This article explains how to extend the session lifetime for an OWA protected by RSA Authentication Agent for Web for IIS.

Resolution

1. Launch the IIS Manager by clicking Start > Control Panel > Administrative Tools then open the Internet Information Services Manager.
2. Click on Sites and then expand.
3. Double click on the RSA SecurID Web Agent Configuration page.
4. Adjust the Cookie Expiration values according to your company environment:

Image description

 

• Expires if not used within specific time means that, If the system is idle for more than 5 minutes it will disconnect the session.
• Always expires after the specific time means that even if the user has connected for more than 15 minutes, then he has to re-authenticate himself to be identified.

Notes

The difference between expiration logoff and modal popup

When choosing the Modal Popup, after the timeout the user must only enter the passcode to unlock the screen.But choosing the Session Logoff action will be after the timeout, user must enter the user ID, passcode and then the Windows domain password to unlock the screen.