Shibboleth IdP v5 expiry warning

[Dave Perry]

Steve

Interesting idea. Certainly for the internally hosted SPs (and IdP) they all sit in the same vSphere datacenter - so I assume the time sync is correct across all windows servers.
I will ask our Core team (who provision VMs for us) to confirm this for me though.

I'll also ask our Library team to monitor for any eResources patterns, and check in with those SPs to see what their time sync arrangements are.


Thanks
Dave


_________________________________________________

Dave Perry
Application Analyst  |  Innovation & Technology Services

York St John University

Lord Mayor’s Walk, York, YO31 7EX
T: +44(0)1904 876 0000
d.perry1 at yorksj.ac.uk<mailto:d.perry1 at yorksj.ac.uk>  |  www.yorksj.ac.uk<http://www.yorksj.ac.uk>

[cid:319872cd-db18-48b2-82f2-2a8562442989]

________________________________
From: Steven Premeau <steven.premeau at maine.edu>
Sent: Thursday, March 6, 2025 1:48 PM
To: Shib Users <users at shibboleth.net>; Dave Perry <d.perry1 at yorksj.ac.uk>
Subject: Re: Shibboleth IdP v5 expiry warning

Caution: Please take care when clicking on links or opening attachments in emails that originate from outside of the university. When in doubt, contact the ITS service desk.

Dave -

  The first thing I would check would be time synchronization of the systems involved.  Relatively minor time differences can generate this error.

Steve.


On Thu, Mar 6, 2025 at 6:48 AM Dave Perry via users <users at shibboleth.net<mailto:users at shibboleth.net>> wrote:
Hi all

(I can't work out how to search the archive right now, to see if this has been answered already)

We are regularly getting the Message Expired error, when users are jumping between sites (as in SPs) quickly - once a login session ha already been established on the IdP (we're using SAML login as the authn method, if that helps).
I've searched the entire IdP folder for 'expir' and can't find a setting to adjust on this.

Any ideas/signposts appreciated.


Thanks
Dave
[York St John University is the University of the Year for Social Inclusion in The Times and Sunday Times Good University Guide 2025]
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20250306/45328aea/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Outlook-bkrnfxci.png
Type: image/png
Size: 12155 bytes
Desc: Outlook-bkrnfxci.png
URL: <http://shibboleth.net/pipermail/users/attachments/20250306/45328aea/attachment.png>