Changing the value of Expires for the IdP session cookie

[Cantor, Scott]

> Are there any options to change/set the Expires value for the IdP session
> cookie (shib_idp_session by default) or is this cookie always a "session
> cookie"?

Always a session cookie, because it has no security implications, it's lifetime is only an issue for allowing logout to occur. Getting rid of it sooner means less logout success, nothing else.

Again, and I've said this many times, SSO is not based on how long that cookie exists.

-- Scott