topic Re: There are 4 timers to be in Collaboration Applications

Cisco Jabber SSO Timeout

reindl_mc — Mon, 18 Mar 2019 01:04:55 GMT

Hi Babu

Jabber with SAML SSO -- when you let the PC run over nights and days without shutdown
then you get some day a message that the session has timed out.

You have to shutdown and start again jabber for successful Login.

How can this issue be adressed ?

Kind regards

You should be getting a

A.M.Mahesh Babu — Tue, 03 May 2016 12:13:06 GMT

You should be getting a message saying the session is expired and do you wish to renew .Aren't you getting this ?

I only get message that

reindl_mc — Tue, 03 May 2016 12:16:52 GMT

I only get message that session is expired - Jabber is still connected, it seems but is not registered anymore. You have to shutdown and start jabber again.

When does this timeout occur ? is there a time to check Setting ? We have SSO - when a session is timeing out - customer assumes that it should reconnect automatically.

any idea ?

Kind regards

Is there any known solution

reindl_mc — Tue, 03 May 2016 19:03:45 GMT

Is there any known solution for this sso Problem ?

I have the same issue...I am

jtranchina — Tue, 03 May 2016 19:08:05 GMT

I have the same issue...I am hoping there is. I just opened a ticket with Cisco asking about the "Token Session Timeout". I found that you can change this in the documentation but they do not mention where to do so. I will keep you posted once I hear back.

There are 4 timers to be

A.M.Mahesh Babu — Wed, 04 May 2016 06:38:54 GMT

There are 4 timers to be considered 1. Idp Idle timeout (A timeout after which terminate a session after a certain amount of inactivity) Where to set : Idp Recommended Value - 8 Hours 2. Absolute Timeout (A timeout after which a session is closed no matter there is user activity or not.) Where to set : Idp Recommended Value - 48 Hours 3. Application session timeout Where to set : CUCM Recommended Value - 30 Minutes ( default) from CLI set webapp session timeout 30 4. OAuth Token Where to set : CUCM Recommended Value - 60 Minutes (default) OAUTH Token Expiry Timer Required Field under Enterprise parameters-->SSO configuration

Re: I have the same issue...I am

shacharalon7 — Tue, 05 Dec 2017 07:00:16 GMT

Hi!

I hope you are doing well.

Have you found a solution for this issue ?

Re: There are 4 timers to be

shacharalon7 — Tue, 05 Dec 2017 09:25:05 GMT

I couldn't find number 3. Application session timeout Where to set : CUCM Recommended Value - 30 Minutes ( default) from CLI set webapp session timeout 30.

Please ket me know where is it in CUCM 11.5.

Thanks!

Shachar

Re: There are 4 timers to be

Aman Soi — Tue, 05 Dec 2017 09:57:33 GMT

Hi,

the range is from 5 - 99999 minutes. So, u won't be able to enter value 4.

set webapp session timeout minutes

Syntax Description

Parameters	Description
minutes	Specifies the time, in minutes, that can elapse before a web application times out and logs off the user. Value range: 5-99999 minutes Default value: 30 minutes

https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/cli_ref/11_5_1/cucm_b_cli-reference-guide-release-1151su3/cucm_b_cli-reference-guide-release-1151su3_chapter_0110.html

regds,

aman

Re: There are 4 timers to be

shacharalon7 — Tue, 05 Dec 2017 12:51:42 GMT

Hi Aman!

Thanks for the quick answer.

Does it affect Cisco Jabber ?
What is the difference between "webapp session timeout" and OAuth Token

Regards,
Shachar

Re: There are 4 timers to be

Aman Soi — Tue, 05 Dec 2017 16:53:22 GMT

Hi,

Jabber login has nothing to do with this command.

what do u mean by OAuth Token?

regds,

aman

Re: There are 4 timers to be

shacharalon7 — Wed, 06 Dec 2017 07:14:01 GMT

Hi Aman,

This discussion is regarding Jabber in SSO deployment and we have the same problem as reindl_mc had.

We have deployed Jabber with SSO at one of our customers (CUCM 10.5 / ADFS).

After approximately 6 days from each login that a user is made the Jabber or the ADFS ends the session.

In the Jabber's Error Notifications we can see the "session has timed out"error.

A.M.Mahesh Babu mention couple of things that can be relevant:

We should be getting a message saying the session is expired and do you wish to renew - We don't get that message

He also mention the 4 timers that can be relevant:

ADFS

- IDP Idle Timeout

- IDP Absolute Timeout

CUCM

- OAuth Token

- Application session timeout

Regarding the ADFS - I found the IDP Idle Timeout that was configured to 8 Hours

But not the IDP Absolute Timeout (Which could defanatliy could be the reason for this problem)

regarding the CUCM i couldn't understand how is the Application session timeout configuration is related to the SSO at the Jabber

Best regards,

Shachar

Re: There are 4 timers to be

Aman Soi — Wed, 06 Dec 2017 09:40:05 GMT

Hi ,

I won't be able to help u on the same.

I suppose u are already in touch with Cisco TAC Engr. So, u can take assistance from him.

regds,

aman

Re: There are 4 timers to be

ruudvanstrijp — Fri, 09 Feb 2018 13:17:29 GMT

Did you find the answer to this? I keep getting error CJ:1000:606 Session Timeout as well. I need to manually reextend my session every 60 minutes, which I figure should be done automatically in the background.

Re: Cisco Jabber SSO Timeout

lior look — Wed, 25 Jul 2018 22:54:12 GMT

Hi there is any updates for this issue?

Please share the TAC number if exist..

I have the same on jabber 12.0(1) with cucm 11.5(1)su2 and ADFS

Re: Cisco Jabber SSO Timeout

Reece — Sun, 12 Aug 2018 22:13:46 GMT

Getting this error on Jabber version 12.0.1 "Your current session has expired. Please renew the session to keep all your services working." !Error: Your session has expired. CJ:1000:606

We didn't see this error on older versions of Jabber, and SAML/SSO configuration hasn't change.

Is there something new that Jabber 12 is doing?

Re: Cisco Jabber SSO Timeout

Reece — Thu, 29 Nov 2018 01:42:43 GMT

Confirming issue persists with Jabber 12.1.0 Build 266460.

On our second TAC case to resolve this, doesn't appear to be Bug CSCvg72905 as suggested.

Re: Cisco Jabber SSO Timeout

Michael Stark — Fri, 12 Jul 2019 01:33:49 GMT

Did you find a fix to this one?

Re: Cisco Jabber SSO Timeout

Emmanuel Akum — Tue, 25 May 2021 08:11:27 GMT

Hi Reece,

Did you get this fixed? We're having the same issue. Actually, we're seeing the following errors:

Error Server Single sign on CJ:1000:500

Error:Your session has expired. CJ:1000:606

Jabber Version:12.9.5

Cheers

Re: There are 4 timers to be

SO107 — Tue, 10 Oct 2023 08:37:18 GMT

Hi, we are getting same error code CJ:1000:606 and CJ:2100:2. In our Environment, we have the Jabber 12.9 and 14.2 versions. The error report is emananting from Clients with Version 14.2.0.58008. Please, let me know how you were able resolved the issue