SP session lifetime/timeout

[Mikael Bak]

Hi Scott,

On 2019. 07. 18. 14:20, Cantor, Scott wrote:
> On 7/18/19, 7:23 AM, "users on behalf of Mikael Bak" <users-bounces at shibboleth.net on behalf of bak.mikael at oszk.hu> wrote:
> 
>> Is there an option I have missed perhaps?
> 
> Perhaps the IdP is sending a SessionNotOnOrAfter attribute in the assertion.
> 

Yes, perhaps.
What is the best way to investigate that? I tried SAML-tracer (a Firefox
plugin), but I did not seem to see any assertion in there. Perhaps I
don't know how to use the SAML-tracer.

I looked in /var/log/shibboleth/shibd.log but I did not find
SessionNotOnOrAfter in it.

Where should I look?

Thanks,
Mikael