OWASPASVS 5.0 requirement
ASVS-V7.6.1 Session lifetime and termination between relying parties (rps) and identity providers (idps) behave as documented, requiring…
- Standard
- OWASP ASVS 5.0
- Chapter
- V7 Session Management
- Section
- V7.6 Federated Re-authentication
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that session lifetime and termination between Relying Parties (RPs) and Identity Providers (IdPs) behave as documented, requiring re-authentication as necessary such as when the maximum time between IdP authentication events is reached.