SP session lifetime / time-out

[Cantor, Scott]

On 8/18/14, 1:07 PM, "David Bantz" <dabantz at alaska.edu> wrote:

>A service owner requests sessions last 5 days, with one day time-out.  Is
>merely setting 
><Sessions lifetime=³432000" timeout=³86400² Š > in shibboleth2.xml
>sufficient, or is some other adjustment required to effect this request
>which
>is a first for me?  (The SSO session lifetime set by the IdP is 8 hours,
>28800 sec.)

It's sufficient unless your IdP has maximumSPSessionLifetime set on the
profile configuration.

In practice, that's not going to work well unless the site is low-volume,
the sessions will accumulate in memory and probably kill it.

-- Scott