SP session time-out period, IDP session time-out period, <NotBefore> and <NotOnOrAfter>

[Cantor, Scott]

On 12/3/14, 8:12 PM, "Adam Dong" <adamdong at vidder.com> wrote:
>
>About SessionNotOnOrAfter as part of the AuthnStatement, is that commonly 
>put in the Assertions by IDPs ?

It's not particularly rare. I don't think Shibboleth does that by default.

>Or is it fairly to say: other than browser-triggered SLO, SP and IDP 
>sessions time out on their own configuration/policy separately, usually 
>there is no synchronization between the two ?

Usually is probably accurate.

-- Scott