5 minute timeout - shib_check_user: error during session lookup

[Peter Schober]

* Ran <ran at sheinberg.net> [2015-11-05 06:14]:
> We have a newly integrated system where we are the SP and the customer is
> using ADFS as the IdP. the setup and the login process was finished
> successfully, however, we are facing some disconnections only when using
> the customer's IdP (not our internal testing IdP) which seems to happen
> after a five-minute waiting period. i.e browsing in the application is OK,
> but if the user waits five minutes, his next click will send him back to
> the IdP login page and the following will be printed to native.log in the SP

I don't think that's possible: The IDP-dependent part is the upper
lifetime of the session at the SP (the IDP can cap that value), but
the SP's inactivity timeout would apply in any case.
Cf. "lifetime" and "timeout" in
https://wiki.shibboleth.net/confluence/display/SHIB2/NativeSPSessions
-peter