MaxAuthenticationAge in WebSSOProfileConsumerImpl

Question

What is the use of WebSSOProfileConsumerImpl.setMaxAuthenticationAge in spring security. Do I need to set its value explicitly? http://docs.spring.io/spring-security-saml/docs/current/api/org/springframework/security/saml/websso/WebSSOProfileConsumerImpl.html

Answer 1

Quote from https://docs.spring.io/spring-security-saml/docs/current/reference/html/configuration-advanced.html#time-interval (with added formatting)

System allows users to single sign-on for up to 7200 seconds since their initial authentication with the IDP (based on value AuthInstance of the Authentication statement). Some IDPs allow users to stay authenticated for longer periods than this and you might need to change the default value by setting maxAuthenticationAge of the WebSSOProfileConsumerImpl bean.