<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Scott,<br><br>I am not claiming SP is doing something wrong. But trying to figure out what the issue may be to fix the issue. <br>We believe we have full debug enabled, do you have any suggestion for us a certain property to set or check a certain log?<br><br>You mentioned IP address checks on native side - what do you mean by this? Which logs are you referring to?<br><br>Thanks<br>Ragadeep<br><br><div>> From: cantor.2@osu.edu<br>> To: users@shibboleth.net<br>> Subject: Re: SP Expiring the User Session - Why?þ<br>> Date: Mon, 9 Dec 2013 21:02:31 +0000<br>> <br>> On 12/9/13, 3:39 PM, "ragadeep" <ragadeep99@hotmail.com> wrote:<br>> ><br>> >We have a IdP initiated SSO usecase and are noticing that the user gets<br>> >timed out in under 2 mins. We are not sure why the user is getting timed<br>> >out so quick.<br>> <br>> The system times you out when it's documented to do so, and it invalidates<br>> the session otherwise if the IP address changes.<br>> <br>> You may be missing logging on the native side showing IP address checks or<br>> the like.<br>> <br>> <br>> Every claim to the contrary has never been borne out, and I have no<br>> insight into why people think it's doing this because nobody who claims<br>> this has ever explained why they were wrong.<br>> <br>> The only case that comes up occasionally is an IdP setting the<br>> SessionNotOnOrAfter attribute to a short value, but your response doesn't<br>> include that attribute.<br>> <br>> I can't tell you anything else, but it doesn't do what you think it's<br>> doing.<br>> <br>> -- Scott<br>> <br>> <br>> --<br>> To unsubscribe from this list send an email to users-unsubscribe@shibboleth.net<br></div> </div></body>
</html>