You are working as a Sysops administrator for a real estate firm. They have Hybrid infrastructure deployed for their intranet applications. On-Prem users accessing AWS resources using AD credentials are complaining of re-login after every 1 hour. Which of the following actions can be taken to extend the user session? 

Answer options:

A.Use the optional SAML attribute “SessionDuration” to set user sessions to be "unlimited".
B.Use the optional SAML attribute “SessionDuration” to set user sessions to be 12 hours which is the maximum value.
C.Remove SAML attribute “SessionDuration”. So it will have a default User session duration of 12 hours.
D.No actions can be taken as the maximum timeout is 1 hour.

Correct Answer: B
SessionDuration is an optional SAML attribute that can be set to determine user sessions. It can be used to set user sessions from 15 mins to 12 hours, with default as 1 hour when no attribute is set.
Option A is incorrect as the maximum duration cannot be "unlimited".
Option C is incorrect. When an attribute “SessionDuration” is not used, the default user session is 1 hour instead of 12 hours.
Option D is incorrect as the User Session duration range can be from 15 minutes to 12 hours with default as 1 hour. Attribute “SessionDuration” can be used to set this duration. If “SessionDuration” attribute is not configured, it will have the default user session as 1 hour.
For more information on user session duration using SAML attributes, refer to the following URL-
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_create_saml_assertions.html