Another query out of left field: extending the session timeout indefinitely for E911 VOIP service

[Florian Lengyel]

Hi,

I suspect my enquiry here will prompt a stinging rebuke, but that's why I evolved my osteoblasts.
One of the colleges here uses Shibboleth for TEAMS authentication. Having no issues with this, they decided to install
Yealink Android Phones for Teams Edition and discovered that their users are prompted to log in (with MFA) to these
VOIP phones every 24 hours when their login session ends. This is not ideal since they were expecting these phones
to stay authenticated indefinitely after login-the phones were expected to be useful for 911 service. I found out about
this activity when I received a phone call from some Microsoft engineers who wanted to know if the session timeout
could be extended indefinitely (they claimed that a "token" from Shibboleth was timing out) or if the authentication
could be renewed without the user having to login.

Anyway, I think the call was motivated by an effort to switch from Shibboleth/SAML2 login to something that supports
WS_FEDERATION and WS_TRUST, which I know that Shibboleth does not support, but out of curiosity I write to
ask if Shibboleth/SAML2 handles periodic authentication of online devices in some way.

Florian


[cid:image002.png at 01D937C8.E4E351B0]
Florian Lengyel, PhD
Identity and Access Management
CUNY CIS 395 Hudson Street, New York, NY 10014
Voicemail: (646) 664-2370 Cell: (917) 621-7845
Email: florian.lengyel at cuny.edu

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20230203/022ab699/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.gif
Type: image/gif
Size: 92 bytes
Desc: image001.gif
URL: <http://shibboleth.net/pipermail/users/attachments/20230203/022ab699/attachment.gif>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 3894 bytes
Desc: image002.png
URL: <http://shibboleth.net/pipermail/users/attachments/20230203/022ab699/attachment.png>