CryptoTransientId lifetimes

[Tom Poage]

Noticing a number of "No login context available" logs in my 2.3.3 IdP
with CryptoTransientId. Not seen with earlier IdP versions, so I'm
wondering if a timeout/lifetime might be an issue.

The example on the ResolverCryptoTransientIDAttributeDefinition page
presents a lifetime of three minutes. Previously, I'd not specified any
lifetime (i.e. default) with the regular transient ID. Source code
(TransientIdAttributeDefinition.java) looks to reflect a default
lifetime of four hours (1000 * 60 * 60 * 4 milliseconds).

Big difference between three minutes and four hours. Am I comparing
apples and oranges? If not, what might be a practical compromise value?

Thanks.
Tom.