Hi Maurizio
Angeli,
SharePoint 2013/2016 Claim-based authentication using STS (security token service) to provide access tokens for server to server authentication. token life time is 10 hours by default and SharePoint cache the AD security details for 24 hours ( the default
case you already talking about ). then you either wait until SharePoint do re-issue tokens using STS or execute power-script for reducing the token life time . the following script achieve your need .
Original Post ACTIVE DIRECTORY SECURITY GROUPS AND SHAREPOINT CLAIMS BASED AUTHENTICATION
Add-PSSnapin Microsoft.SharePoint.PowerShell;
$CS = [Microsoft.SharePoint.Administration.SPWebService]::ContentService;
#TokenTimeout value before
$CS.TokenTimeout;
$CS.TokenTimeout = (New-TimeSpan -minutes 2);
#TokenTimeout value after
$CS.TokenTimeout;
$CS.update();
$STSC = Get-SPSecurityTokenServiceConfig
#WindowsTokenLifetime value before
$STSC.WindowsTokenLifetime;
$STSC.WindowsTokenLifetime = (New-TimeSpan -minutes 2);
#WindowsTokenLifetime value after
$STSC.WindowsTokenLifetime;
#FormsTokenLifetime value before
$STSC.FormsTokenLifetime;
$STSC.FormsTokenLifetime = (New-TimeSpan -minutes 2);
#FormsTokenLifetime value after
$STSC.FormsTokenLifetime;
#LogonTokenCacheExpirationWindow value before
$STSC.LogonTokenCacheExpirationWindow;
#DO NOT SET LogonTokenCacheExpirationWindow LARGER THAN WindowsTokenLifetime
$STSC.LogonTokenCacheExpirationWindow = (New-TimeSpan -minutes 1);
#LogonTokenCacheExpirationWindow value after
$STSC.LogonTokenCacheExpirationWindow;
$STSC.Update();
IISRESET
Useful Posts
https://sergeluca.wordpress.com/2013/07/06/sharepoint-2013-use-ag-groups-yes-butdont-forget-the-security-token-caching-logontokencacheexpirationwindow-and-windowstokenlifetime/
https://www.vioreliftode.com/index.php/active-directory-security-groups-and-sharepoint-claims-based-authentication/
i hope this information will help you
Best Regrads, Ahmed Madany MCTS @twitter http://twitter.com/ahmed_madany @Blog http://ahmedmadany.wordpress.com @LinkedIn http://eg.linkedin.com/pub/ahmed-madany/35/80/2b6
Clear-SPDistributedCacheItem not working
