Shibboleth SP3 Premature Session Expiration

Michael Kim michaeljkim at
Wed Dec 19 09:52:55 EST 2018

I think the documentation is fine.  I think what confused me was the examples I see say checkAddress=“false” but no mention of consistentAddress.  Because people, like myself, who are more generalists and not specialists.  It’s hard to know that they kind of work hand in hand.  I think it would help if in the example shibboleth xml file to specify both checkAddress=“false” and consistentAddress=“false” also.  

Just my opinion

But thanks for confirming

> On Dec 19, 2018, at 9:45 AM, Cantor, Scott <cantor.2 at> wrote:
> On 12/19/18, 9:42 AM, "users on behalf of Michael Kim" <users-bounces at on behalf of michaeljkim at> wrote:
>> Is there a way for the SP to not check the IP address?  I had checkAddress = false.  I didn’t specify consistentAddress.  It 
>> seems the default for consistentAddress is true.  Would that still cause the SP to check for the address?
> Since that's literally what the documentation says, it would help to understand why you had to ask so the next person won't need to. How should it be worded?
> -- Scott
> -- 
> For Consortium Member technical support, see
> To unsubscribe from this list send an email to users-unsubscribe at

More information about the users mailing list