Applications that autorefresh

[Chad La Joie]

On Tue, Jul 17, 2012 at 11:26 AM, Christopher Bongaarts <cab at umn.edu> wrote:
> On 7/16/2012 4:36 PM, Chad La Joie wrote:
>> Well, if the SP is redirecting automatically that means they're using
>> eager sessions.  I would recommend changing the SP to use lazy
>> sessions and to display a "Your session has timed out, please click
>> here to login again" page when appropriate.
>
> The application is vendor provided, so while I can suggest changes to
> the Shib SP and get them in place, I don't have any control over the
> actual app code (which uses a simple REMOTE_USER integration with Shib).

I understand, but handling the case where the user doesn't have a
session but tried to do something is a case that the SP really needs
to handle.  There are more reason that situation can occur than just
the one you're talking about.

-- 
Chad La Joie
www.itumi.biz
trusted identities, delivered