canvas session timeout?

[Cantor, Scott]

> Based on my understanding, I'm not sure how that would be possible.  The
> IDP includes IssueInstant and notBefore / notAfter timestamps, but none of
> that implies / suggests a session life.

Unless you send them SessionNotOnOrAfter, they have full license to use whatever length they want, and if they interrupt a user's work, the SP is the only one in a position to implement preservation of any state across sessions.

> Am I missing something?  Has anyone else run into this with Canvas?

I haven't been asked about it to date, no.

-- Scott