Shibboleth session vs Application session

[Eric Goodman]

> You mean [1] I think. That UserPass page is a horror show.

Yes, sorry bad copy and paste.


>I guess a
> change is that AuthenticationResults have both a lifetime and a timeout
> now, not just a lifetime.

Meaning that if you set an AuthenticationResults lifetime of 8 hours and a timeout of 15 minutes (and the IdP session is set to at least 15 minutes), then authenticating to a different application every 10 minutes would keep the authentication active for up to 8 hours?

--- Eric