CAS in IdP v3

[Cantor, Scott]

> That is unusual but it ought to work. If you're getting prompted for
> credentials each time you reach the IdP, then there's something wrong with
> your IdP session. Since you appear to be operating in something like stateless
> mode, I wonder if you have session cookies disabled in your browser. That
> could cause what you're seeing.

No, stateful:
idp.session.StorageService = shibboleth.StorageService

That's the in-memory variant. But there's still a session cookie of course, with the session ID in it.

I guess there are the timeout and lifetime settings of various sorts, but you'd have to really do something weird to them to lose the session (or at least the authentication result in the session) after 5 minutes.

-- Scott