canvas session timeout?

[Brady, Jason W]

We have gotten some similar reports, but Canvas didn’t blame our SSO. Word got to me because our Distance Ed staff asked if it could be a session issue on our side.

Canvas said that the session may have timed out or a caching issue. This was in response to a student who said they were replying to a discussion when they got “You’re not logged in”.

In our case, our session is set to live only long enough to complete authentication via idp.authn.defaultLifeTime and idp.authn.defaultTimeout set to PT1S.

Jason Brady * Web Developer * San Bernardino Community College District *
1289 Bryn Mawr Ave, Suite B, Redlands, CA 92374 *
Tel 909-384-8691 * Mobile 951-295-9515 * Fax 909-796-6579 * jbrady at sbccd.cc.ca.us<mailto:jbrady at sbccd.cc.ca.us>

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Liam Hoekenga
Sent: Tuesday, September 12, 2017 12:41 PM
To: Shib Users <users at shibboleth.net>
Subject: canvas session timeout?

I need a sanity check.

We've gotten some complaints from our students that their Canvas sessions are timing out in the middle of them doing stuff (resulting in "You're not logged in" messages when replying to things).

Canvas says our SSO is to blame.

Based on my understanding, I'm not sure how that would be possible.  The IDP includes IssueInstant and notBefore / notAfter timestamps, but none of that implies / suggests a session life.

My assumption is if Canvas no longer has a valid session, it returns to the user to the IDP, and that if the user no longer has a valid session with the IDP, they're asked to log-in again, and then sent back to the SP.

Am I missing something?  Has anyone else run into this with Canvas?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170913/3e4edda4/attachment.html>