Mohamed,

The cas session (TGT) only applies to cas, the lifetime of SSO.
Every other service is responsible for its own session.
If the user has to log in again after an hour, perhaps the application is 
forcing a re-authn. See 
https://apereo.github.io/cas/7.3.x/protocol/CAS-Protocol-Specification.html#211-parameters

Ray
________________________________
From: [email protected] <[email protected]> on behalf of Mohamed Iheb JEMAI 
<[email protected]>
Sent: June 19, 2026 01:08
To: CAS Community <[email protected]>
Subject: [cas-user] CAS SSO Session Timeout Not Honored by Integrated 
Application After Migration to CAS 7.3.5


Hello,

I have a question regarding session timeout behavior after migrating from CAS 
6.6.15 to CAS 7.3.5.

In our CAS server, we have the following ticket configuration:

cas.ticket.tgt.hard-timeout.time-to-kill-in-seconds=7140
cas.ticket.st.time-to-kill-in-seconds=120

The TGT timeout is configured to be almost 2 hours, and this configuration was 
already working before the migration.

However, we have an external application integrated with our CAS SSO server 
using CAS authentication. This application logs users out every 1 hour, even 
though the CAS TGT is still supposed to be valid for nearly 2 hours.

Because of this behavior, I suspect the application is not taking the CAS 
session lifetime into account and may be managing its own session timeout.

Has anyone encountered a similar situation? Do you have any recommendations on 
how to investigate whether the timeout is coming from CAS or from the client 
application itself?

Thank you for your help.

--
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
---
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected]<mailto:[email protected]>.
To view this discussion visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/52c0249e-443f-47da-8534-25d0dd8b61bbn%40apereo.org<https://groups.google.com/a/apereo.org/d/msgid/cas-user/52c0249e-443f-47da-8534-25d0dd8b61bbn%40apereo.org?utm_medium=email&utm_source=footer>.

-- 
- Website: https://apereo.github.io/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/YQBP288MB008195410AD31424952C6BF2CEE22%40YQBP288MB0081.CANP288.PROD.OUTLOOK.COM.

Reply via email to