IDP session timeout

[Wessel, Keith]

Yes, I read that page before I posted. But it appears that, at least for the session value, it gets reset after a user visits the IDP from any SP. It's unclear for the login handler timeouts from that page, but I'd expect it's the same: the counter gets reset after each login for that given login handler. Thus my statement about keeping my session alive on the IDP by hitting it every 29 minutes (assuming all SPs use the same login handler, that is).

Is there sucha thing as a max lifetime? Am I missing something on that page?

Keith


-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of Kevin P. Foote
Sent: Tuesday, August 20, 2013 3:48 PM
To: Shib Users
Subject: Re: IDP session timeout



On Tue, 20 Aug 2013, Wessel, Keith wrote:

> Is there a setting swomewhere in the IDP that controls max session lifetime? I know the SP has these two values for inactivity and max lifetime, but I can only find info on the one value in the IDP.
>

The IdP is goverend by two session timing outlined here..

<https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthnSession>

each LoginHandler handler.xml (authenticationDuration)

overall session internal.xml SessionManager bean

------
thanks
  kevin.foote

--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net