SSO session lifetime in IdP

[Sharma, Dattathreya]

>That said, you can instruct the SP to restrict its session lifetime to
>a given amount of time via the 'maximumSPSessionLifetime' option on
>the SSO profile handlers.


If I instruct SP to use 15 min session, it won't make any difference.
When SP session times out there is a round trip to IdP and user is still
signed in due to longer IdP session. Correct?

Datta

On 3/1/12 2:17 PM, "Chad La Joie" <lajoie at itumi.biz> wrote:

>No, nor would that make any sense.  Nothing about the SP would make
>the IdP session any more or less secure.  Only the authentication
>method can affect that.
>
>That said, you can instruct the SP to restrict its session lifetime to
>a given amount of time via the 'maximumSPSessionLifetime' option on
>the SSO profile handlers.
>
>On Thu, Mar 1, 2012 at 16:50, Sharma, Dattathreya <datta at ucla.edu> wrote:
>> Our IdP session lifetime is set to 30 min. Can I configure shorter
>>lifetime
>> for a specific SP?
>> If authentication is initiated by this SP, I want  15 min session; in
>>all
>> other cases it would be 30 min.
>> IdP version 2.3.3
>>
>> Thanks,
>> Datta
>>
>> --
>> To unsubscribe from this list send an email to
>> users-unsubscribe at shibboleth.net
>
>
>
>-- 
>Chad La Joie
>www.itumi.biz
>trusted identities, delivered
>--
>To unsubscribe from this list send an email to
>users-unsubscribe at shibboleth.net