Hello,
I am currently configuring SAML SSO between iTop (version 3.2.x) and Microsoft Entra ID.
The SSO integration is working correctly, and users can authenticate without any issue.
However, I am experiencing an issue with session duration:
Users are automatically logged out from iTop after approximately 30–60 minutes, even though the authentication via Entra ID is still valid.
I would like to extend the session duration (for example up to 1 day), but I am not sure where this should be configured.
My questions:
Is there a configuration parameter in iTop to control session timeout?
Does the SAML extension (combodo-saml) manage session duration, or is it handled elsewhere?
Should this be configured at the PHP level (session.gc_maxlifetime), or is there a recommended approach within iTop itself?
Thank you for your help.
Best regards