Azure SAML SSO

Question

Azure SAML SSO

Helen Madrigal Fernandez 6

The user logs in to Anyconnect, then accessing resources using SAML via Azure.

When entering Azure login credentials the user selects to 'Stay signed in'.

However, when logging out of internal resources, and as long as the logout URL is not set to the Azure logout page, and then re-attempting login, the user is again asked for login credentials.

On VPN endpoint SAML config we have set up "reauthenticate=false"

Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator

2022-10-25T13:56:44.91+00:00

@Helen Madrigal Fernandez

Can you brief about the ask that you are looking for?
Helen Madrigal Fernandez 6 Reputation points

2022-10-25T16:12:41.887+00:00

The user authenticates, selects "stay signed in" however is being asked ti reauthenticate every time!
Helen Madrigal Fernandez 6 Reputation points

2022-10-27T15:27:40.747+00:00

Thank you for your insight into this, I am fairly new, and if possible, which steps or which should I look to get more detail about the persistent cookies ?
Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator

2022-11-01T03:15:35.77+00:00

@Helen Madrigal Fernandez

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.

1 answer

Your answer

Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator

2022-10-25T13:56:44.91+00:00

@Helen Madrigal Fernandez

Can you brief about the ask that you are looking for?
Helen Madrigal Fernandez 6 Reputation points

2022-10-25T16:12:41.887+00:00

The user authenticates, selects "stay signed in" however is being asked ti reauthenticate every time!
Helen Madrigal Fernandez 6 Reputation points

2022-10-27T15:27:40.747+00:00

Thank you for your insight into this, I am fairly new, and if possible, which steps or which should I look to get more detail about the persistent cookies ?
Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator

2022-11-01T03:15:35.77+00:00

@Helen Madrigal Fernandez

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread.

Answer 1

Sandeep G-MSFT 20,911 Microsoft Employee Moderator

@Helen Madrigal Fernandez

If user is logged in to application and if he just closes the browser and tries to open the application again, he will not be prompted for authentication.

Azure AD’s Keep Me Signed In (KMSI) feature uses a persistent cookie to allow users with member accounts in the tenant directory to close and resume browser sessions without needing to sign in again. Azure AD generates the persistent cookie if a user responds affirmatively to the Stay signed in? prompt after a successful authentication.

In your situation it looks like persistent cookies is not getting set. Or user is logging out of application and later he is trying to login again.

Sandeep G-MSFT 20,911 Reputation points Microsoft Employee Moderator

2022-10-27T18:03:27.187+00:00

@Helen Madrigal Fernandez

To know more about persistent sessions, you can refer below article,

https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime#persistence-of-browsing-sessions

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

Azure SAML SSO

1 answer

Your answer