timeout settings

[Lohr, Donald]

Thanks so much. Very helpful.  At this time a quick question before I 
push my response back to those asking,

The time values like PT60M,

what does the PT stand for?



On 6/20/19 12:48 PM, Cantor, Scott wrote:
> Also, to add another wrinkle I find quite funny, we all spent 6-7 figures deploying MFA solutions because passwords are so weak, and then proceeded to enable Remember Me features that bypass MFA silently so that any timeouts or SSO bypass rules really only impose the first factor, the password we decided was too weak.
>   
> Of course, people do apply policies to block Remember Me on shared machines by...yes, network ranges. So that's why I focus on that these days, despite the obvious limitations. The IdP can do that just as well.
>
> -- Scott
>
>

-- 
D o n a l d   L o h r
  I n f o r m a t i o n   S y s t e m s
  J a m e s   M a d i s o n   U n i v e r s i t y
  5 4 0 . 5 6 8 . 3 7 3 0

  DOS:  Bad command or file name
  bash: command not found