SAML session expiration causes IdP portal session to expire

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.0.X, 7.1.X, 7.2.X, Master
• Fix Version/s: 7.0.X, 7.1.X, 7.2.0 GA1, 7.2.X
• Component/s: Application Security > SAML
• Labels:
  • liferay-connector-to-SAML-2.0-4.1.0
  • liferay-connector-to-SAML-2.0-5.0.0
• Branch Version/s:
  7.2.x, 7.1.x, 7.0.x
• Backported to Branch:
  Committed
• Fix Priority: 4
• Sprint: AS | Iteration 18
• Git Pull Request: https://github.com/brianchandotcom/liferay-portal-ee/pull/24566

When SAML Session expires and the SP reaches out to the IdP to log in, the IdP portal session is invalidated instead of relogging the SP even though Force Authn is not checked.

Fixed in Liferay Connector to SAML 2.0 v.5.0.0 for DXP 7.2