Different inactivityTimeout in a MFA environment

[Francesco Malvezzi]

hi all,

I was trying to follow the documentation at [Advanced Session Lifetime 
Example](https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199506072/SessionConfiguration)
to give a longer inactivityTimeout to TOTP flow, something like:

       <bean p:id="authn/TOTP" parent="shibboleth.AuthenticationFlow"
  
p:inactivityTimeout="%{idp.authn.TOTP.inactivityTimeout:%{idp.authn.defaultTimeout:PT30M}}">
             <property name="supportedPrincipals">
                 <list>
                     <bean parent="shibboleth.SAML2AuthnContextClassRef"
  
c:classRef="urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken" />
                 </list>
            </property>
       </bean>

where idp.authn.inactivityTimeout is defined elsewhere.

authn/TOTP is a subflow inside authn/MFA.

However, if I'm not mistaken, it looks the inactivityTimeout from the 
outer authn/MFA overrules my configuration.

If I'm right, how can achieve a setup with different inactivityTimeout 
based on the used subflow in a MFA environment?

thank you for your time,

Francesco