SP session lifetime/timeout

Mikael Bak bak.mikael at oszk.hu
Thu Jul 18 07:21:41 EDT 2019

Hi list,

I would like users to be able to use logged in sessions for an entire
work day, but for some reason users are asked to log in again after
about one hour.

I have this in my /etc/shibboleth/shibboleth2.xml :

<Sessions lifetime="28800" timeout="0" relayState="ss:mem"
  checkAddress="true" handlerSSL="true" cookieProps="https">

I checked the IdP settings (SimpleSAMLphp-based) and it's the same: 8
hour lifetime and 0 for inactivity timeout.

Is there an option I have missed perhaps?


More information about the users mailing list