[JIRA] (IDP-2124) custom session lifetime

[peter (Jira)]

peter ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=60ad33f05dc18500704c2ef8 ) *created* an issue

Identity Provider ( https://shibboleth.atlassian.net/browse/IDP?atlOrigin=eyJpIjoiMmY2Yjc5OTViOTBhNDI2YmJhOTNkMmNiYmI2MWQwNzIiLCJwIjoiaiJ9 ) / New Feature ( https://shibboleth.atlassian.net/browse/IDP-2124?atlOrigin=eyJpIjoiMmY2Yjc5OTViOTBhNDI2YmJhOTNkMmNiYmI2MWQwNzIiLCJwIjoiaiJ9 ) IDP-2124 ( https://shibboleth.atlassian.net/browse/IDP-2124?atlOrigin=eyJpIjoiMmY2Yjc5OTViOTBhNDI2YmJhOTNkMmNiYmI2MWQwNzIiLCJwIjoiaiJ9 ) custom session lifetime ( https://shibboleth.atlassian.net/browse/IDP-2124?atlOrigin=eyJpIjoiMmY2Yjc5OTViOTBhNDI2YmJhOTNkMmNiYmI2MWQwNzIiLCJwIjoiaiJ9 )

Issue Type: New Feature Assignee: Unassigned Created: 31/May/23 12:00 PM Priority: Trivial Reporter: peter ( https://shibboleth.atlassian.net/secure/ViewProfile.jspa?accountId=60ad33f05dc18500704c2ef8 )

As previously discussed in https://shibboleth.net/pipermail/users/2022-December/053267.html one of our members recently asked about “an effective SSO lifetime of 14 days, by request of our CISO, in order to avoid users from having to authenticate to often” (my own translation w/ a bit of paraphrasing).

They were not comfortable with (or possibly not technically capable of) rewriting the relevant HTTP Reponse Header values in a servlet filter as suggested.

If that’s reasonably easy to implement I guess it would be a welcome addition to the existing controls relating to SSO sessions.

( https://shibboleth.atlassian.net/browse/IDP-2124#add-comment?atlOrigin=eyJpIjoiMmY2Yjc5OTViOTBhNDI2YmJhOTNkMmNiYmI2MWQwNzIiLCJwIjoiaiJ9 ) Add Comment ( https://shibboleth.atlassian.net/browse/IDP-2124#add-comment?atlOrigin=eyJpIjoiMmY2Yjc5OTViOTBhNDI2YmJhOTNkMmNiYmI2MWQwNzIiLCJwIjoiaiJ9 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail ) or iOS ( https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100225- sha1:a994ca2 )
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/commits/attachments/20230531/239a74bc/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-avatar-307388db-b356-4ab2-b20a-5eb8bf7552cc
Type: image/png
Size: 302 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230531/239a74bc/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-comment-icon-09c37e88-0e35-41ba-b0a8-bec468c26c17
Type: image/png
Size: 1084 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230531/239a74bc/attachment-0005.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-trivial-25b4fd43-2564-498e-bb7f-bd68e9e20655
Type: image/png
Size: 446 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230531/239a74bc/attachment-0006.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jira-generated-image-static-footer-desktop-logo-ed96a27d-01ca-4439-a72f-c0dd5844c490
Type: image/png
Size: 10805 bytes
Desc: not available
URL: <http://shibboleth.net/pipermail/commits/attachments/20230531/239a74bc/attachment-0007.png>