Different SSO timeouts for different login types

[Cantor, Scott]

On 5/17/12 1:28 AM, "Sumit Khanna" <skhanna21 at students.tntech.edu> wrote:
>
>I realize that I can only adjust the SSO time for the IDP (each SP has
>their own timeout). In the hander.xml, I see where the SSO is configured
>by defining the PreviousSession LoginHandler.

Yes, but the durations of a given login handler's contribution to the
session are governed by the "duration" of each method, so that's what
you'd have to manipulate.

>My first though was to extend this base LoginHandler or the
>PreviousSession handler and adjust the timeout based on conditions.

If you want to control SSO entirely absent that handler, you replace it,
rather than extend it, I think.

>And am not entirely certain where the timeout is being set for the
>previous session.

Has nothing whatsoever to do with that handler. Read the AuthnEngine
source before you spend time looking at the handlers.

-- Scott