Shibboleth SP3 Premature Session Expiration

[Michael Kim]

I think the documentation is fine.  I think what confused me was the examples I see say checkAddress=“false” but no mention of consistentAddress.  Because people, like myself, who are more generalists and not specialists.  It’s hard to know that they kind of work hand in hand.  I think it would help if in the example shibboleth xml file to specify both checkAddress=“false” and consistentAddress=“false” also.  

Just my opinion

But thanks for confirming

> On Dec 19, 2018, at 9:45 AM, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> On 12/19/18, 9:42 AM, "users on behalf of Michael Kim" <users-bounces at shibboleth.net on behalf of michaeljkim at gmail.com> wrote:
> 
>> Is there a way for the SP to not check the IP address?  I had checkAddress = false.  I didn’t specify consistentAddress.  It 
>> seems the default for consistentAddress is true.  Would that still cause the SP to check for the address?
> 
> Since that's literally what the documentation says, it would help to understand why you had to ask so the next person won't need to. How should it be worded?
> 
> -- Scott
> 
> 
> -- 
> For Consortium Member technical support, see https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net