Client persistent storage not remembering user

[Cantor, Scott]

> Is my SP not configured properly 

Unless the SP is sending the ForceAuthn flag in its requests, no.

? I am using Spring Boot + spring saml for
> the SP. May the problem comes from this ?

The only possible SP interaction point is ForceAuthn.

> 5. I close the browser

Umm. Closing the browser is supposed to end your session. Whether it does or not depends on your browser. It often no longer does, but that's viewed as a negative thing, not an intended thing. Session cookies are supposed to be gone. So you probably just explained your "problem".

The local storage is NOT where the session is tracked, only where it's stored. The session is identified by a cookie and is supposed to be invalidated at the loss of that cookie.

> Also the "Don't Remember Me" is making me a bit confused. Does it have an
> impact when shibboleth.ClientPersistentStorageService is *not* set.

It prevents SSO and any session getting created, it has nothing to do with how sessions are stored since there won't be one.

-- Scott