SANtricity System Manager SAML session timing out after 5 minutes
Applies to
- NetApp SANtricity OS
- Security Assertion Markup Language (SAML) configuration
- Okta Identity Provider
Issue
- SANtricity System Manager SAML session timing out after 5 minutes constantly and browser reports:
The server has logged you out. Log in to return to System Manager - In E-Series AutoSupport or Support bundle logs, the
web-server-trace.logrecords the session being invalidated after about 5 minutes:
2025-04-16 18:26:57,620 INFO [jetty-1164033] c.n.e.a.r.s.SamlImpl [LoggingFilter.java:416] [requestId=XXX, deviceId=N/A {"authId":"unknown","authType":"unknown","resource":"/devmgr/v2/saml/login","remoteAddress":"10.X.XX.XX",
"method":"POST","query":"redirect=false","status":"200","executionTime":"8"}
2025-04-16 18:26:58,629 INFO [jetty-1164053] c.n.e.a.r.s.SamlImpl [LoggingFilter.java:416] [requestId=XXX, deviceId=N/A {"authId":"XXX","authType":"saml","resource":"/devmgr/v2/saml/assertion","remoteAddress":"10.X.XX.XX","method":"POST",
"query":null,"status":"303","executionTime":"7"}...
2025-04-16 18:32:03,998 INFO [jetty-1164053] c.n.e.a.r.AuthFilter [AuthFilter.java:268] [requestId=0, deviceId=1] Invalidating session, saml assertion is expired for samlAssertionId=null
- Okta identify provider maximum application session lifetime value is set to a value greater than 5 minutes. This setting sets the
SessionNotOnOrAftervalue in SAM Assertion. In below example, the value was set to 1 hour.
<saml2:Assertion xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
xmlns:xs="http://www.w3.org/2001/XMLSchema"
ID="id-8642639103648655255983945250"
IssueInstant="2025-04-30T18:02:33.836Z”
...
<saml2:AuthnStatement xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion"
AuthnInstant="2025-04-30T18:02:33.413Z"
SessionIndex="_5ac3a4afb86b3ec72628bb4523e91319"
SessionNotOnOrAfter="2025-04-30T19:02:33.836Z"
<saml2:AuthnContext