Shibboleth IdP 3.2.1 on Windows 2012r2

[Cantor, Scott]

What are the plugins in use here? Storage? Session timeouts?

I don't think any sort of Windows investigation will be of use at all, Java is totally foreign to it. The JVM can give you memory statistics but I think some of them require running the JVM with options at start up. I know you have to do that to hook a profiler up to it.

I have never learned anything from a profiler, but that's because I don't know what I'm looking for, so somebody with that experience would have to weigh in on that.

Being that Microsoft is so profoundly misusing ECP, I guess that's a clear red flag to me also, especially with the potential via email of so many mail clients pounding on it with bad passwords over and over.

But we're running ECP for our mobile app and if there were any real issue with it leaking, I'd have seen it by now.

-- Scott