timeout settings

[Cantor, Scott]

On 3/25/20, 7:29 PM, "users on behalf of Lohr, Donald" <users-bounces at shibboleth.net on behalf of lohrda at jmu.edu> wrote:

> Does such a beast exist in the IdP that could override the 
> authn.defaultTimeout setting (say 30 minutes) for a specific SP that had 
> a 45 minute timeout, so the two aligned?

Timeouts are static. The reuseCondition on the AuthenticationFlowDescriptor bean of a method  adds dynamic control on top of basic timeout/lifetime semantics. The static controls determine the results that are eligible for reuse and the condition is evaluated before actually reusing it.

-- Scott