Maintain application session duration same as that of IDP while signing in through Shibboleth

[Peter Schober]

Viswanathan, Srinivasan (ELS-CON) via users <users at shibboleth.net> [2024-08-14 16:15 CEST]:
> We thought if we can extract the IssueInstant, NotBefore and
> NotOnOrAfter present in the IDP SAML response and by some means send
> the same to our application through the Shib attributes. Is this
> approach possible?

None of these are SessionNotOnOrAfter (which is what Scott said you
want). And if an IDP wants to you adhere to it the IDP is free to send it.
If the IDP doesn't send it it as no business to request this from you.
Also not all (other) IDPs have to send it in order for this to be
used/useful for the ones that send it.

-peter