Persistent Cookies with Shibboleth IDP?

[Nate Klingenstein]

Byte,

> Is it possible to use persistent cookies with Shibboleth IDP (by default or custom code)

I don't think it's possible by configuring the distribution using the username/password login handler, but you can do anything you want with custom code, obviously.

> to keep the user logged in even after closing the browser?

Just set a duration in the user's idp_session cookie(custom code) and make sure that user session objects are persisted for an equally long time in the IdP authentication handler and session manager(and sticky load balancer if used).

You could also just use a custom login handler and handle all user login state there.

That, or ask your users to use a "modern" browser that persists all session cookies anyway… ;D

Thanks,
Nate.