SP session lifetime/timeout

Cantor, Scott cantor.2 at osu.edu
Thu Jul 18 09:59:14 EDT 2019

On 7/18/19, 9:25 AM, "users on behalf of Mikael Bak" <users-bounces at shibboleth.net on behalf of bak.mikael at oszk.hu> wrote:

> Is it now safe to assume that my SP is misconfigured?

Doubt it. Your users are probably changing addresses or engaging in other behavior causing the session to be invalid. The logs are the only way to know, and even then it's a snipe hunt. "My sessions timeout prematurely" is a constant claim that has never been confirmed or demonstrated.

I guess you can check the cacheAllowance in the SessionCache element, that's the only other setting that can prematurely delete sessions.

-- Scott

More information about the users mailing list