LoginContext idp 2.4

[Cantor, Scott]

On 3/12/15, 1:37 PM, "samir el otmani" <elotmani.samir at gmail.com> wrote:

>i try to change authenticationDuration in <LoginHandler xsi:type="RemoteUser" authenticationDuration="1">
>but it doenst work , i try to wait more than 1 minute in login page , but no error or something show that the method expired .

The duration on a login handler is the amount of time the IdP will remember and reuse a previous authentication result when the PreviousSession handler is invoked. Has nothing to do with "login context" validity. Login contexts are used to track request state through the life of one request.

Secondly, RemoteUser handlers are relying on a separate mechanism for authentication and the IdP has no idea what happens when that handler is invoked. I guarantee that it's being invoked, but whether you notice or not is entirely up to what's setting RemoteUser.

-- Scott