On 7/18/19, 7:23 AM, "users on behalf of Mikael Bak" <users-bounces at shibboleth.net on behalf of bak.mikael at oszk.hu> wrote: > Is there an option I have missed perhaps? Perhaps the IdP is sending a SessionNotOnOrAfter attribute in the assertion. -- Scott