IdP Session/Handler Timeout

[Kevin P. Foote]

On Wed, 19 Dec 2012, Royder, Kyle D wrote:

-> Since we only use the UsernamePassword login handler, does this combine into a hard timeout (not an inactivity timeout) of 30 minutes for users using that login handler, basically for everyone?

Yes. If your SP hits the IdP requesting authorization after that 30 minutes then 
the user will be prompted. 

If your running only one Handler then I generally keep them matched.. It
just makes sense to me anyway. Once you deviate into more LoginHandlers then the
overall session makes a bit more sense.. 

------
thanks
  kevin.foote