Does hitting /Shibboleth.sso/Session refresh the inactivity timeout?

[Cantor, Scott]

On 11/8/13, 10:31 AM, "Brian Reindel" <brian at reindel.com> wrote:

>We have a thick client protected under the context /client. It hits a
>set of services that live unprotected at /services. Because
>technically it isn't making requests to /client, but is active,
>Shibboleth thinks the inactivity timeout has passed.

Why not just disable the timeout? Set it to zero.

> So we're
>discussing how to address this, and one thought involves periodically
>hitting /client/Shibboleth.sso/Session because it would tell us if the
>session is active and would refresh the inactivity. However, this
>isn't technically a protected endpoint, so I'm not sure it would
>actually refresh the inactivity timeout. Can anyone tell me if this is
>the case?

It does, yes.

-- Scott