SP session lifetime and influence of IdP

Scott Koranda skoranda at gmail.com
Fri Feb 3 17:30:50 GMT 2012


Hi,

On this page

https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions

I read this text regarding the SP session lifetime:

"The actual time may be less than this value
(if an IdP indicates it should be shorter) but will never be
longer."

I have also looked at an old email thread and found this
statement (from Chad):

"For what it's worth, the 2.1 IdP has a way to control the
authentication duration and the SP session lifetime separately."
(Fri, 19 Sep 2008 13:54:11 +0200)

How precisely does the IdP control/indicate to the SP the
session lifetime?

How precisely may I configure the Shibboleth IdP to
control/indicate the SP session lifetime?

Thanks,

Scott K


More information about the users mailing list