Manually force Shibboleth SP to expire/invalidate all sessions

Peter Schober peter.schober at
Wed Feb 21 08:42:51 EST 2018

* Tom Noonan <tom at> [2018-02-21 14:37]:
> the default session lifetime is 8h (the default), then there is an
> 8h window in which someone could be disabled in the IdP but still
> access services as their service session is valid.

Seems to me you're saying that your own session lifetime is to big a
window of opportinty for you.


More information about the users mailing list