canvas session timeout?

[Brady, Jason W]

Actually, DE just told me Canvas is now indicating our Session might be at fault.

Could the re-authentication to the IdP part be done without the student leaving the canvas page, if the IdP session was still valid? If so, I wonder if maybe their software depends on that.

I talked with our DE person and she said that the open platform has the same issue (Canvas session timing out), so unless they expect it to be different for SSO enabled scenarios, I don’t see why they would blame SSO.

I’ve asked her to find out how long the Canvas session lasts (she said she had and the response was indefinite?! She balked at that too and asked for docs) and if they have a recommendation for the SSO session lifetime length.

Jason Brady * Web Developer * San Bernardino Community College District *
1289 Bryn Mawr Ave, Suite B, Redlands, CA 92374 *
Tel 909-384-8691 * Mobile 951-295-9515 * Fax 909-796-6579 * jbrady at sbccd.cc.ca.us<mailto:jbrady at sbccd.cc.ca.us>

From: users [mailto:users-bounces at shibboleth.net] On Behalf Of Liam Hoekenga
Sent: Tuesday, September 12, 2017 12:41 PM
To: Shib Users <users at shibboleth.net>
Subject: canvas session timeout?

I need a sanity check.

We've gotten some complaints from our students that their Canvas sessions are timing out in the middle of them doing stuff (resulting in "You're not logged in" messages when replying to things).

Canvas says our SSO is to blame.

Based on my understanding, I'm not sure how that would be possible.  The IDP includes IssueInstant and notBefore / notAfter timestamps, but none of that implies / suggests a session life.

My assumption is if Canvas no longer has a valid session, it returns to the user to the IDP, and that if the user no longer has a valid session with the IDP, they're asked to log-in again, and then sent back to the SP.

Am I missing something?  Has anyone else run into this with Canvas?

Liam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20170913/bc910757/attachment-0001.html>