SSO and Google Chrome: Persistent or Session based

[mg3]

I’m supporting a client who uses SAP Concur with SSO via the Google Chrome browser. I’ve done some research but haven’t found a clear answer.

The issue is that the client has to enter her credentials, sign in with her Microsoft account, and complete DUO 2FA every time she closes and reopens Chrome. However, if she signs out and signs back in without closing the browser, SSO works as expected.

Is SSO for SAP Concur designed to persist after the browser is closed and reopened, or is it session based and only maintained as long as the browser remains open?

[KevinD]

@mg3 I asked our authentication team about this and they said it sounds like something with your customer's identity provider. Our session cookies get wiped out when the user closes the browser.

[mg3]

Hi KevinD,

Thank you for your reply. So are you confirming that it is supposed to be session based? If so, I will let the client know this is by design.

[KevinD]

@mg3 I am not sure. I just passed along what the person from our Authentication team said. 🙂 

It sounds to me like it is session based. At least that's how I interpreted it.