Configuring the Validity Period of Logon Tickets

Use

To reduce the risk malicious users reusing logon tickets in replay attacks, reduce the validity period of the logon tickets. The default validity period is eight hours.

Prerequisites

●      This procedure requires you to restart the SAP NetWeaver Application Server (AS) Java, so you should plan for the required downtime while the AS Java restarts.

●      You have configured the AS Java to support Single Sign-On (SSO) with logon tickets.

Procedure

...

       1.      Configure the required UME properties.

For more information about editing UME properties, Editing UME Properties.

Set the UME property ume.admin.login.ticket_lifetime. You can set hours and minutes.

hh:mm

       2.      Restart the AS Java.