I have SharePoint 2013 on premise with ADFS 3.0 authentication. If a user opens a document from SharePoint, he or she is able to save the document correctly. If that same users does something else and comes back to that document an hour later, he or she gets the error,
UPLOAD FAILED: You are required to sign in to upload your changes to this location.
Clicking the Sign In button typically does nothing but occasionally brings up the Authentication selector dropdown (Authenticate.aspx) in a modal window. In the few times that page comes up, selecting ADFS will authenticate the user and the document is saved. I have no idea why this comes up sometimes and other times does nothing.
I suspect this issue has to do with token lifetime but I'm not sure. I set the timeout in ADFS for my Relying Trust to be 10 hours via the following PowerShell ran on the ADFS server:
Set-ADFSRelyingPartyTrust -Targetname "My_SharePoint_relying_party" -TokenLifetime 600
I then updated my Security Token Service in SharePoint via the following:
$sts = Get-SPSecurityTokenServiceConfig $sts.CookieLifetime = New-TimeSpan -Minutes 600 $sts.WindowsTokenLifetime = New-TimeSpan -Minutes 600 $sts.MaxApplicationTokenCacheItems = 100000 $sts.MaxLogonTokenCacheItems = 100000 $sts.MaxServiceTokenCacheItems = 100000 $sts.Update()
It now resembles the following:
Is there anything else I need to do to increase the authentication token lifetime for saving SharePoint documents from Office?