Re: SP Expiring the User Session - Why?‏

[Cantor, Scott]

On 12/9/13, 3:39 PM, "ragadeep" <ragadeep99 at hotmail.com> wrote:
>
>We have a IdP initiated SSO usecase and are noticing that the user gets
>timed out in under 2 mins. We are not sure why the user is getting timed
>out so quick.

The system times you out when it's documented to do so, and it invalidates
the session otherwise if the IP address changes.

You may be missing logging on the native side showing IP address checks or
the like.


Every claim to the contrary has never been borne out, and I have no
insight into why people think it's doing this because nobody who claims
this has ever explained why they were wrong.

The only case that comes up occasionally is an IdP setting the
SessionNotOnOrAfter attribute to a short value, but your response doesn't
include that attribute.

I can't tell you anything else, but it doesn't do what you think it's
doing.

-- Scott