Shibboleth IdP 3 - Stale Session

[Cantor, Scott]

It's still working for me at least 5 minutes in, and from what I can tell, 
the control over flow timeout is just the container session. That's a bit 
long frankly by default, since it's 30 minutes, and that's a lot of extra 
data in memory in some cases, so I wouldn't leave it there, but it sure 
isn't 2.

I think you must have already modified your container to lower the 
<session-lifetime> setting in web.xml (which is misnamed, it's a timeout).

-- Scott