Different SSO timeouts for different login types

[Sumit Khanna]

Hello,

I'm currently working on attempting to setup Shibboleth to set different 
SSO timeout intervals on the IDP. Ideally, we would like the user to 
have an option on the login page (radio button or check box), that 
allows the user to specify if he or she is on a private machine or 
mobile device and would like to have a longer SSO time.

I realize that I can only adjust the SSO time for the IDP (each SP has 
their own timeout). In the hander.xml, I see where the SSO is configured 
by defining the PreviousSession LoginHandler.

My first though was to extend this base LoginHandler or the 
PreviousSession handler and adjust the timeout based on conditions. I've 
been looking at the source code here:

https://svn.shibboleth.net/java-shib-idp2/trunk/src/main/java/edu/internet2/middleware/shibboleth/idp/authn/provider/PreviousSessionLoginHandler.java

and

https://svn.shibboleth.net/java-shib-idp2/trunk/src/main/java/edu/internet2/middleware/shibboleth/idp/authn/LoginHandler.java

And am not entirely certain where the timeout is being set for the 
previous session. Also, from within this class, would it be possible to 
get POST variables to the original login.jsp page? An alternative is we 
have a load balance that  can add additional headers. Could I change the 
timeout based on a header (BigIP can add a header if the request is from 
mobile or from within the University).

Thanks
Sumit Khanna
http://penguindreams.org