Reasons why an SP would expire a session early?

[Cantor, Scott]

> 1: I'm not seeing helpful details using the package-supplied 'shibd.loggger'
> levels. Do you have suggestions for additional Log4J categories to turn on?

Wrong log, not wrong category. Session invalidation is normally a module side issue, not shibd.

> 2: The IP address did not change between the two HTTP transactions.

Then usually there's a lack of session clustering going on, load balancer issues or the like, or it literally didn't send the cookie at all.

-- Scott