IDP session timeout

[virajitha]

> 4. If I am working on SP and the IDP session expires, then how will the SP
> know that there is no active session and it should also logout?

>It won't. Sessions at all the systems are entirely independent of each
other.

I am not sure  I understood your response. In the scenario I mentioned, i
was hoping that through some back channel SOAP request  (or any other
shibboleth specific method), Service Provider will keep checking if the
session at IDP is active. It would not be a good user experience, if he
comes to know that the IDP session has expired but still the Service
Provider (web application) is still having an active session.
In this
url:http://xacmlinfo.org/2015/02/12/sp-idp-session-time-out-with-saml2-sso/
under section "SP-IDP session synchronization using SAML2 SSO", point 3
mentions the way an IDP and SP should communicate in case of session
timeout. 






--
View this message in context: http://shibboleth.1660669.n2.nabble.com/IDP-session-timeout-tp7629470p7629498.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.