<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I've heard several times that the default IdP session lifetime for
SSO is 8 hours. I take this to mean that I can authenticate to the
IdP once, say at 8am, and be able to SSO into other web pages all
day long (fancy things like forced re-auth, and not meeting
authentication requirements for the SP excepted). <br>
<br>
I've also found documentation[1][2] that indicates that the default
session lifetime for AuthUserPass and individual SP's as relying
parites is 30 minutes. I remember reading somewhere else about
confusion between authentication method and session[3], and here it
seems to indicate that the default is 30 minutes, not 8 hours.<br>
<br>
I need to change how long the IdP will keep an SSO session alive
for, to something between 4 and 8 hours. Have I found the right
knobs, or is there something else to adjust?<br>
<br>
<br>
[1]
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthUserPass</a><br>
[2]
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPSAML2SSOProfileConfig">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPSAML2SSOProfileConfig</a><br>
[3]
<a class="moz-txt-link-freetext" href="https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthnSession">https://wiki.shibboleth.net/confluence/display/SHIB2/IdPAuthnSession</a><br>
<br>
<div class="moz-signature">
<div id="signature-separator" style="line-height:5px; color:
#888;">-- </div>
<div id="sig" style="margin: 6px 0; padding: 8px; border-top: 1px
#000 dashed; font: 12px/15px Tahoma, Geneva, sans-serif;
color:#be0f34;"> <img src="http://goo.gl/2ZYiQ" alt="me"
moz-do-not-send="true" style="float:left; padding: 2px 6px 0
0;" border="0" height="43" width="43"> <span style="color:
black;">Don Faulkner, CISSP</span> | <span><a
onmouseover="this.style.textDecoration = 'none'"
onmouseout="this.style.textDecoration = 'underline'"
style="color:#be0f34;" href="http://its.uark.edu/">IT
Security</a> at the <a
onmouseover="this.style.textDecoration = 'none'"
onmouseout="this.style.textDecoration = 'underline'"
style="color:#be0f34;" href="http://www.uark.edu/">University
of Arkansas</a></span> <br>
<span style="font-family: Monaco, Lucida Sans Typewriter,
monospace; color: black;">contact>> </span><span
style=""><a onmouseover="this.style.textDecoration = 'none'"
onmouseout="this.style.textDecoration = 'underline'"
style="color:#be0f34;" href="mailto:donf@uark.edu">donf@uark.edu</a>
| +1 (479) 575-2905</span> <br>
<span style="font-family: Monaco, Lucida Sans Typewriter,
monospace; color: black;">connect>> </span><span
style=""><a onmouseover="this.style.textDecoration = 'none'"
onmouseout="this.style.textDecoration = 'underline'"
style="color:#be0f34;"
href="http://www.facebook.com/uarkITS">uarkITS on Facebook</a>
| <a onmouseover="this.style.textDecoration = 'none'"
onmouseout="this.style.textDecoration = 'underline'"
style="color:#be0f34;" href="http://twitter.com/uaits">@uaits</a>
| <a onmouseover="this.style.textDecoration = 'none'"
onmouseout="this.style.textDecoration = 'underline'"
style="color:#be0f34;" href="http://twitter.com/dfaulkner">@dfaulkner</a>
</span>
</div>
</div>
</body>
</html>