Differential Timeouts with like IdPs?

[Cantor, Scott]

On 1/29/20, 10:54 AM, "users on behalf of Michael Gettes" <users-bounces at shibboleth.net on behalf of gettes at ufl.edu> wrote:

> Yesterday I spent several hours with InfoSec policy folk going through 800-63 (yet again, you know how I love 800-63
> and friends) and other OMB documents and this is the conclusion we all reached.  We can address non web issues with
> AD GPOs for users and lockout timeouts and so on - but it’s the web context that’s a bit alluding and Shib seems well
> positioned (with code changes as you suggest) to be able to help solve, if not solve, the issues.

Screen saver locks prevent all application access, not just web or non-web, so I'm not sure why it's one or the other. It's the shared machine case where the problems come up, in which case it's best to talk about *that* problem, and not the general one.

Anyway, the way to get it implemented is filing an RFE for it. It's really too big a change for this version this late, so it needs to get tracked so it doesn't get forgotten.

-- Scott