'keepIdPSessionAlive'

[Tom Zeller]

Mostly Scott,

Whenever you get a chance, this is the follow up to the dev call today where I asked about "tieing browser activity to the IdP session”.

The idea is for the browser/client to ask the IdP to keep the SSO session alive for another interval, so that the user does not have to authenticate/login again until the interval has elapsed.

The thinking is that some sort of thread on the browser/client would send a keepalive message to an endpoint on the IdP. I imagine that endpoint would update a timeout on the storage record[s] representing the session[s].

What do you think ? Any pitfalls ? Is it possible ?

I’m thinking an IdP endpoint could expose the storage service, so yes, I’m assuming server-side storage.

Thanks !
Tom