Idp session lifetime max value

[GOSWAMI, Shivanggiri (Contractor)]

Hello All,

What is the maximum value that can be set for idp.authn.defaultlifetime and idp.authn.idletimeout in idp.properties. I want a session to be valid for 6 months, is it possible?

I also have a requirement where I want different users to have different session expiry times(for e.g. 12 hour session for user1 and say 6 months session for user2), is this achievable?
OR
If I can have a configuration such that a user logged in through WEB  SSO will have a 12 hour session and a user authenticated via ECP profile  can have a 6 months session.

If a user is authenticated through web sso (shibboleth login page). Can I use the generated session cookie(shib_idp_session) in a subsequent ECP AuthRequest, ofcourse without authorization header to get the saml assertion for the same user.

Apologies for being verbose..!

Thanks for your time..!

Best Regards,
Shivang Goswami
Oxford University Press (UK) Disclaimer

This message is confidential. You should not copy it or disclose its contents to anyone. You may use and apply the information for the intended purpose only. OUP does not accept legal responsibility for the contents of this message. Any views or opinions presented are those of the author only and not of OUP. If this email has come to you in error, please delete it, along with any attachments. Please note that OUP may intercept incoming and outgoing email communications.