SP session lifetime/timeout

Mikael Bak bak.mikael at oszk.hu
Thu Jul 18 08:52:52 EDT 2019

Hi Scott,

On 2019. 07. 18. 14:20, Cantor, Scott wrote:
> On 7/18/19, 7:23 AM, "users on behalf of Mikael Bak" <users-bounces at shibboleth.net on behalf of bak.mikael at oszk.hu> wrote:
>> Is there an option I have missed perhaps?
> Perhaps the IdP is sending a SessionNotOnOrAfter attribute in the assertion.

Yes, perhaps.
What is the best way to investigate that? I tried SAML-tracer (a Firefox
plugin), but I did not seem to see any assertion in there. Perhaps I
don't know how to use the SAML-tracer.

I looked in /var/log/shibboleth/shibd.log but I did not find
SessionNotOnOrAfter in it.

Where should I look?


More information about the users mailing list