Search code examples
sessionauthenticationopenidsamlonelogin

Onelogin: Check if session is still valid - OpenID and SAML

We have a custom IdP and several applications that use this IdP to authenticate using SAML and openID. The authentication happen when we check the credential with OneLogin.

Since we have a mix of SAML and opneID application, there is a way to know if the session is still valid in OneLogin?

Thanks

Solution

  • Checking whether the session is still valid depends on the protocol in use by the Relying Party that wants to perform this check: when using SAML one can use the IsPassive=true flag on the Authentication Request, when using OpenID Connect one can use prompt=none flag on such a request.