IDP session timeout

[Virajitha Sarma]

​
Hi,

I am having a query regarding this logout functionality in IdP.

1. I have a SP (non-shibboleth) and IdP(shibboleth).
2. In IDP, the following are the session lifetime configurations:
idp.session.enabled=true
idp.session.timeout=PT24H
idp.authn.defaultLifetime=PT24H
idp.authn.defaultTimeout=PT60M

3. Does IDP by default considers idp.session.enabled property as true even
if it is not set? Because in the idp.properties, this property is commented
out by default.

4. If I am working on SP and the IDP session can expire if the session
timeout has reached. Since user is still working on the application, it
will not be a good user experience to make him forcefully logout if IDP
session has expired. How can i increase the IDP session at runtime, if SP
is active. Is there any SAML request to do so?

Thanks and Regards,
Virajitha
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161114/b487519b/attachment.html>