SP session lifetime/timeout

[Cantor, Scott]

On 7/18/19, 9:25 AM, "users on behalf of Mikael Bak" <users-bounces at shibboleth.net on behalf of bak.mikael at oszk.hu> wrote:

> Is it now safe to assume that my SP is misconfigured?

Doubt it. Your users are probably changing addresses or engaging in other behavior causing the session to be invalid. The logs are the only way to know, and even then it's a snipe hunt. "My sessions timeout prematurely" is a constant claim that has never been confirmed or demonstrated.

I guess you can check the cacheAllowance in the SessionCache element, that's the only other setting that can prematurely delete sessions.

-- Scott