When request activity is detected on the SP is the session lifetime extended, or is it truly that the session will expire when the lifetime has passed no matter what? In many applications the session will live indefinitely until the inactivity timeout expires or the user manually logs out so I wanted to double check.