Shibboleth session vs Application session

[Cantor, Scott]

On 12/8/14, 3:25 PM, "Sathish Anickode" <SAnickode at skytouchtechnology.com> 
wrote:

>The following link 
>(https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthnSession) 
>states that the user will be forced to authenticate when the user session 
>expires even though the authentication method lifetime has not exceeded.

That's true.

>If this is the case, can we set the user session expiration to 15 minutes 
>and periodically refresh the session if the user is actively using an SP?

The session "lifetime" is actually a timeout, so there is no fixed 
expiration. The authentication methods are explicitly a fixed duration. 
And no, there is no way to do that unless you're going to do some kind of 
hacky polling trick.

-- Scott