Does hitting /Shibboleth.sso/Session refresh the inactivity timeout?

Brian Reindel brian at reindel.com
Fri Nov 8 10:31:30 EST 2013


We have a thick client protected under the context /client. It hits a
set of services that live unprotected at /services. Because
technically it isn't making requests to /client, but is active,
Shibboleth thinks the inactivity timeout has passed. So we're
discussing how to address this, and one thought involves periodically
hitting /client/Shibboleth.sso/Session because it would tell us if the
session is active and would refresh the inactivity. However, this
isn't technically a protected endpoint, so I'm not sure it would
actually refresh the inactivity timeout. Can anyone tell me if this is
the case?


More information about the users mailing list