Documentation

How to set the Oak login token session expiration

Last update: Fri Jul 26 2024 00:00:00 GMT+0000 (Coordinated Universal Time)

This article addresses setting the login-token cookie expiration for Adobe Experience Manager 6.x. Edit the TokenConfigurationImpl in the OSGi console to set the desired timeout value, then update the corresponding configuration file in the JCR repository.

Description description

Environment
Adobe Experience Manager 6.x

Issue
How do I set the login-token cookie expiration for AEM?
This token affects the timeout for the session for default AEM authentication (token authentication) and SAML-based authentication.

Resolution resolution

Solution
For more documentation on the token configuration, see the api docs on Apache.org.

  1. Go to http://aem-host:port/system/console/configMgr/org.apache.jackrabbit.oak.security.authentication.token.TokenConfigurationImpl and log in as admin.

  2. Edit the value of the token configuration:

    1. Token Expiration=Set this to desired timeout value in milliseconds (for example 3600000 would be 1 hour)

    2. Token Length=8

    3. Hash Iterations=1000

    4. Hash Salt Size=8

      Note:  The  default token expiration time  for AEM is 43200000 ms (12 hours).

  3. Once you edit the  TokenConfiguration  from the OSGI console, the file /apps/system/config/org.apache.jackrabbit.oak.security.authentication.token.TokenConfigurationImpl.config is created in the JCR repository.

  4. Go to http://aem-host:port/crx/de/index.jsp.

  5. Browse to and open this file /apps/system/config/org.apache.jackrabbit.oak.security.authentication.token.TokenConfigurationImpl.config.

  6. If the field  passwordHashAlgorithm  exists in the file, then remove that line and save.

    For example, your file might look like this:

    code language-none 
    passwordHashIterations=I"1000"
tokenExpiration="3600000"
tokenLength="8"
passwordSaltSize=I"8"
recommendation-more-help
3d58f420-19b5-47a0-a122-5c9dab55ec7f