bindingTemplate.html

[Paul G. Szabady]

Greetings!

I recently changed my shibboeth SP (v2.5.3 on rhel 6) setup from the 
older explicit sessioninitiator settings, etc to the newer SSO element 
style.  Everything is working as expected, except for one piece.  I have 
never seen the redirect page created by the bindingTemplate.html, 
despite my old configuration using it.  (E.g.: <SessionInitiator 
type="SAML2" acsIndex="1" acsByIndex="false" 
template="bindingTemplate.html"/>)  With my new configuration, I see the 
redirect page for a second or two and then get redirected to the 
appropriate IdP.  Under normal circumstances, I wouldn't care, but we 
have a proprietary application that is proxied through this SP.  It has 
a number of drop down menus that now show "Shibboleth Authentication 
Request" after about 10 mins of idle time, instead the drop down menu items.

1) Why would this cause an issue (timeout?) after 10 mins, when my 
global timeouts are set much higher?

<Sessions lifetime="28800" timeout="14400"
             checkAddress="false"
             handlerURL="/Shibboleth.sso"
             handlerSSL="false"
exportLocation="http://localhost/Shibboleth.sso/GetAssertion"
             exportACL="127.0.0.1"
             cookieProps="https"
             idpHistory="false"
             idpHistoryDays="7"
             postData="ss:mem"
             postTemplate="postTemplate.html">

2) How/Where can I change this behavior?  I've been looking through the 
confluence wiki, but can't seem to find it.

My settings are fairly vanilla, but I can send more detail if you need it.

Thanks in advance for any guidance!
Paul

-- 
Paul G. Szabady
http://go.unc.edu/i3RTs