Skip to main content
Question

OpenID connect session time out

  • October 17, 2022
  • 6 replies
  • 235 views

Forum|alt.badge.img+6
  • Steward **
  • 21 replies

Hello all,

I’m facing another issue with OpenID connect (Centreon/OKTA), every hour users are disconnect, dashboard display error message ‘Invaid cerdentials.’

Did you encontered this issue ?

 

6 replies

Forum|alt.badge.img+4
  • Steward *
  • 19 replies
  • October 17, 2022

Hello,
In Administration > Authentification, maybe it’s this :

 


Forum|alt.badge.img+6
  • Author
  • Steward **
  • 21 replies
  • October 17, 2022

Hello @Wisonic 

Why modify password section ?


Forum|alt.badge.img+4
  • Steward *
  • 19 replies
  • October 17, 2022

@Bochi 

Sorry I was completely wrong I wanted to talk about this option. maybe your "session expiration time" is 60min. So users are automatically logged out every hour

 

In Administration > Parameters > Centreon UI


Forum|alt.badge.img+6
  • Author
  • Steward **
  • 21 replies
  • October 17, 2022

I already modiy this parameter, I put it in 120minutes but every hour I have the message Invalid credentials.


Forum|alt.badge.img+3
  • Steward *
  • 7 replies
  • July 23, 2025

Hi,

Do you have fix this problem? i have the same issue. The connection work but after times (but 1h) i have invalid credential. in log i view a the following messages 

[2025-07-23T10:46:46+0200] [NOTICE] [Security\Domain\Authentication\AuthenticationService:87]: Your session has expired
[2025-07-23T10:46:46+0200] [NOTICE] [Security\Domain\Authentication\AuthenticationService:87]: Your session has expire

after delete centreon’s cookie in my browser the openid authentification works. i tried to play with timeout, nothing works


Forum|alt.badge.img
  • Steward *
  • 1 reply
  • July 23, 2025

I'm using Centreon 24.10.4, my token got a "expires_in":3600 but is never renewed.

The refreshToken() function in /usr/share/centreon/src/Core/Security/Authentication/Domain/Provider/OpenIdProvider.php is never called.

After one hour it ends (centreon-web.log) with :

[2025-07-23T09:38:48+0200] [NOTICE] [Security\Domain\Authentication\AuthenticationService:87]: Your session has expired

The GitHub backlog says that the issue is fixed (https://github.com/centreon/centreon/issues/2150) but it is not.

This is a serious issue preventing us to use OpenID authentication provider.