Shibboleth 3 idp session timeout configuration

[Cantor, Scott]

> Say that the IDP authn timeout is 60m and SP timeout is also 60 m but simce
> SP uses sliding window concept say it uses the application after 45 mins from
> its session login.. the session must be valid till after 45+60 mins and when the
> user at 75 mins after the original login tries to switch SP it will be redirected to
> IDP  login page whereas the user would ideally want to be logged in on
> switching the sp.

They will be logged in. Whether they get prompted or not is up to whoever controls the IdP and its timeouts. In general that is not up to the SP and cannot be assumed.

> So what configuration changes must beade to make something like this work

It does work. I still have no idea what you're asking or what it is you want. If there's a language barrier, I can't help that unfortunately.
 
-- Scott