How to configure cookies for ESA?

In this article is described instructions for configuring Efecte Secure Access component's cookies.

Session cookies 

After the ESA authentication is successful, a session for the user's browser is initiated by 'Shibboleth' (and stored as 'cookies' in the user's browser), so the user doesn't have to authenticate again while the session is active. A logged-in user closing their browser destroys their session, and that user must log in again. This cannot be disabled

ESA includes control of the session, cookie, and token timeouts through the Sessions and Tokens tabs in the Realm settings menu.

Cookies policy agreement

Usually when 'whistleblower' page is first shown - it prompts user for his/her agreement on Efecte Cookie policy. User can agree or decline.

It is possible to edit the cookie message which is presented to the User, from ESA admin view, like on the following screenshots (make sure, proper realm is first selected from ESA selector):

Cookie policy agreement can be disabled by changing the requirement level from Required to Disabled.