Shibboleth 3 idp session timeout configuration

[Priyanshu Bhalotia]

Hi scott,
thanks for the insight, cleared up more than a few of my doubts.
just fyi i am controlling both the IDP and SP.

https://www.drupal.org/node/1936510

I went through this link and I want something similar to this where i can
re-authenticate the user at SP after the inactivity timeout without having
them to re-enter their credentials.(inactivity timeout is less than the
session timeout)
we are using Shibboleth 3.2.1 and would like to know how something similar
to this can be achieved here.


On Fri, Oct 7, 2016 at 12:27 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:

> > Say that the IDP authn timeout is 60m and SP timeout is also 60 m but
> simce
> > SP uses sliding window concept say it uses the application after 45 mins
> from
> > its session login.. the session must be valid till after 45+60 mins and
> when the
> > user at 75 mins after the original login tries to switch SP it will be
> redirected to
> > IDP  login page whereas the user would ideally want to be logged in on
> > switching the sp.
>
> They will be logged in. Whether they get prompted or not is up to whoever
> controls the IdP and its timeouts. In general that is not up to the SP and
> cannot be assumed.
>
> > So what configuration changes must beade to make something like this work
>
> It does work. I still have no idea what you're asking or what it is you
> want. If there's a language barrier, I can't help that unfortunately.
>
> -- Scott
>
> --
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>



-- 
Priyanshu Bhalotia
Platform Engineer
Wooqer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161007/0b5ae445/attachment-0001.html>