SP session time-out period, IDP session time-out period, <NotBefore> and <NotOnOrAfter>

[Adam Dong]

Hi, Scott and all,

After the typical SP-initiated SSO, both IDP side and SP side would each have a local http session created for that browser instance.

My questions are :

How is the SP local session time-out period decided ?

It has nothing to do with the <NotBefore> and <NotOnOrAfter> in the <Assertion>’s <SubjectConfirmationData> or <Condition>, right ?

Furthermore, it has nothing to do with the IDP local session time-out period, right ?

Thanks,
Adam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20141203/848a6de3/attachment.html