IDP login page lifetime/timeout question

[Cantor, Scott]

The flow state is stored in the container session, which is configurably by your container in whatever way it documents, or can be configured with web.xml (but you're better off doing it globally to avoid introducing your own copy of web.xml just for that one purpose).

Default is usually a 30 minute timeout. There is no lifetime in the servlet specification, AFAIK, it's more or less infinite if it never times out.

-- Scott