question on Oak login Idle timeout setting (org.apache.jackrabbit.oak.security.authentication.token.TokenConfigurationImpl) and protected+published pages.

[jayv25585659]

scenario: There is a public page that's behind a login. We're not using the built-in SAML authentication ("Adobe Granite SAML 2.0 Authentication Handler"  - com.adobe.granite.auth.saml.SamlAuthenticationHandler) that's provided by AEM publisher.

---

I had a look at the cookies and login-token cookie is not present. Would the Oak login idle timeout still work? 

Thanks a lot.

[Jörg_Hoh]

I think it would. But you need to take care of account creation, credential management etc on your own. I would recommend to use SAML.

[arunpatidar · Accepted solution]

I think, it does