OAS 2025 July Patch - SSO Timeout Not Redirecting to Custom Logoff URL

Question

Hi Everyone,

Good morning. I'm running into an issue with OAS 2025 (July patch) and need to confirm the expected behavior for SSO timeout scenarios.

Current Setup:

* OAS 2025 with July patch applied
* SSO enabled: OAS > OHS > OID > OAM
* Custom Logoff URL configured

When users manually click Logout, they're correctly redirected to our custom Logoff URL. However, when a session timeout occurs, users are instead taken to the default login page at bi-security-login/login.jsp rather than our custom Logoff URL.

I found a previous thread about configuring timeout behavior with DV in OAS 2025, where the response indicated this issue should be resolved with the July 2025 patch. Since I'm already on that patch level, I want to confirm what the expected behavior should be.

Configuring Time Out Behavior when using DV in OAS 2025 — Oracle Analytics

With SSO configured and a custom Logoff URL set, should session timeouts redirect to the custom Logoff URL or is the current behavior (redirecting to the default login page) actually, correct?

Thanks,

Sherry

Gopi Mannava · Answer

Hi Sherry, Any luck with this issue?

BrandonH · Answer

quick thoughts:

-Check if you have the patch for Bug 37634679.

-confirm if you have nextGenAuth set:

$DOMAIN_HOME/config/fmwconfig/biconfig/OBIPS/incubation.properties

oracle.bips.auth.nextGenAuth=????

-Does this only happen when the timeout occurs from the /dv side? Or also when the timeout happens from /analytics?

Do you have a value set for https://myoas.com/analytics/systemsettings/#security "User Inactivity Timeout (minutes)" / "oracle.bi.tech.settings.userInactivityTimeout" ?

Sherry J George · Answer

Hi Steve,

Thank you for the guidance. I've verified the configuration and found a potential issue.

bi-environment.xml has the correct custom Logoff URL configured and config.properties shows internalSessionTokenExpiryTime=14400.

In the advanced settings, I had configured 'Sign Out Inactive Users Automatically' = true and 'User Inactivity Timeout' = 60 minutes.

We have a OBIEE 12c instance where this behavior was not noticed. I will compare the SSO settings and also test with setting the 'Sign Out Inactive Users Automatically' property to false to see if this resolves the timeout redirect issue.

Will update with results.

Thanks,

Sherry