RE: SP Expiring the User Session - Why?‏

[ragadeep]

Scott,

I am not claiming SP is doing something wrong. But trying to figure out what the issue may be to fix the issue. 
We believe we have full debug enabled, do you have any suggestion for us a certain property to set or check a certain log?

You mentioned IP address checks on native side - what do you mean by this? Which logs are you referring to?

Thanks
Ragadeep

> From: cantor.2 at osu.edu
> To: users at shibboleth.net
> Subject: Re: SP Expiring the User Session - Why?‏
> Date: Mon, 9 Dec 2013 21:02:31 +0000
> 
> On 12/9/13, 3:39 PM, "ragadeep" <ragadeep99 at hotmail.com> wrote:
> >
> >We have a IdP initiated SSO usecase and are noticing that the user gets
> >timed out in under 2 mins. We are not sure why the user is getting timed
> >out so quick.
> 
> The system times you out when it's documented to do so, and it invalidates
> the session otherwise if the IP address changes.
> 
> You may be missing logging on the native side showing IP address checks or
> the like.
> 
> 
> Every claim to the contrary has never been borne out, and I have no
> insight into why people think it's doing this because nobody who claims
> this has ever explained why they were wrong.
> 
> The only case that comes up occasionally is an IdP setting the
> SessionNotOnOrAfter attribute to a short value, but your response doesn't
> include that attribute.
> 
> I can't tell you anything else, but it doesn't do what you think it's
> doing.
> 
> -- Scott
> 
> 
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20131209/7d3a3930/attachment.html