Maintain application session duration same as that of IDP while signing in through Shibboleth

[Viswanathan, Srinivasan (ELS-CON)]

Dear Scott,

However, considering the number of IDPs, it would be difficult to obtain the setting from each IDP and set the application session duration right?

Thanks and regards,
V. Srinivasan
________________________________
From: Cantor, Scott <cantor.2 at osu.edu>
Sent: Monday, August 12, 2024 5:50 PM
To: Shib Users <users at shibboleth.net>
Cc: Viswanathan, Srinivasan (ELS-CON) <s.viswanathan1 at elsevier.com>; Dorminvil, Marc (ELS-LOW) <m.dorminvil at elsevier.com>; Maduskar, Bhupesh (ELS-CON) <b.maduskar at elsevier.com>
Subject: Re: Maintain application session duration same as that of IDP while signing in through Shibboleth

[Some people who received this message don't often get email from cantor.2 at osu.edu. Learn why this is important at https://aka.ms/LearnAboutSenderIdentification ]

*** External email: use caution ***



You are not correct. SessionNotOnOrAfter is the mechanism by which the IdP signals an upper bound to the SP and that's advisory only.

The IdP has a setting to control it.

-- Scott


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240814/e8f7f6fd/attachment.htm>