SP timing out after 60 minutes.

[Christopher Bongaarts]

On 3/27/2013 11:25 AM, Ragadeep Sriperumbudur wrote:
> - IdP controls user authentication for users in a system that consists of
> two applications. Application A guarded by SP1 and Application B guarded by
> SP2
> - User goes through an IdP initiated SSO, accesses App-A. After doing some
> operations the user tries to access App-B
> - The client wants the user to go through the process of authentication
> (/let's assume Username/Pass authentication/) when the user switches from
> App-A to App-B
>
> Is there an alternative way to achieve the above without using
> SessionNotOnOrAfter?

They need to turn off single-signon at the IdP.  If it's Shib, this 
typically means commenting out the PreviousSession login handler.

Note that their desired behavior is the opposite of what most folks want...

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%