IDP SSO lifetime (30m or 8h)?

[Chad La Joie]

On Wed, May 30, 2012 at 11:25 AM, Don Faulkner <donf at uark.edu> wrote:
>
> I've heard several times that the default IdP session lifetime for SSO is
> 8 hours.

Did you read this in our documentation anywhere?

>I take this to mean that I can authenticate to the IdP once, say at
> 8am, and be able to SSO into other web pages all day long (fancy things like
> forced re-auth, and not meeting authentication requirements for the SP
> excepted).

No, as [3] indicates, there are two things to consider.  1) that you
have an active session and 2) that you have an active authentication
method.

> [3] https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthnSession

--
Chad La Joie
www.itumi.biz
trusted identities, delivered