SP session lifetime/timeout

[Mikael Bak]

Hi list,

I would like users to be able to use logged in sessions for an entire
work day, but for some reason users are asked to log in again after
about one hour.

I have this in my /etc/shibboleth/shibboleth2.xml :

<Sessions lifetime="28800" timeout="0" relayState="ss:mem"
  checkAddress="true" handlerSSL="true" cookieProps="https">


I checked the IdP settings (SimpleSAMLphp-based) and it's the same: 8
hour lifetime and 0 for inactivity timeout.

Is there an option I have missed perhaps?

TIA,
Mikael