Session Closes on Browser Close

[Cantor, Scott]

> If there are alternatives that /only/ use cookies with an Expires
> attribute that satisfy your needs (in most cases that means
> cross-domain WebSSO with rich attribute support) feel free to use
> that instead.

Heh, this is certainly the first time anybody has complained that Shibboleth sessions are too fragile.

In any case, cookieLifetime has been there since 2.1, you can use it if you really want to set an expiration time for them that goes beyond session.

In fact, I've been meaning to play with that as a means if possibly getting around the Firefox and Chrome nonsense. It seems that "persistent" cookies are now the way to achieve non-persistence.

-- Scott