<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">The documentation in the Shibboleth wiki is somewhat obtuse when it comes to sessions and session timeouts. Does anyone have a PDF or other source of documentation that better explains all the settings that influence session timeouts, both
from the SP side and from the IdP/assertion side?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I thought that if I set timeout=1800 in shibboleth2.xml that my sessions would not timeout until 1800 seconds/30 minutes of inactivity. This was not the case. I discovered that my Identity Provider dictated the duration of the session,
and that the session timeout is absolute: if the IdP says the session timeout is 30 minutes, then I have 30 minutes from the time I authenticate, regardless of whether I’m active the whole time. This is based on what I see when I look at /Shibboleth.sso/Session—the
session duration counts down regardless of whether I’m active.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<table class="MsoTableGrid" border="0" cellspacing="0" cellpadding="0" style="border-collapse:collapse;border:none">
<tbody>
<tr>
<td width="163" valign="top" style="width:1.7in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><img width="146" height="159" id="_x0000_i1025" src="cid:image001.png@01CF4CD2.C9B725A0"><!--[if gte mso 9]><xml>
<o:OLEObject Type="Embed" ProgID="PBrush" ShapeID="_x0000_i1025" DrawAspect="Content" ObjectID="_1457771763">
</o:OLEObject>
</xml><![endif]--><o:p></o:p></p>
</td>
<td width="216" valign="top" style="width:2.25in;padding:0in 5.4pt 0in 5.4pt">
<p class="MsoNormal"><br>
<b><span style="font-size:12.0pt">James W. Anderson<o:p></o:p></span></b></p>
<p class="MsoNormal">Cloud and Integration Architect<o:p></o:p></p>
<p class="MsoNormal">The Coca-Cola Company<o:p></o:p></p>
<p class="MsoNormal">404.676.4914<o:p></o:p></p>
<p class="MsoNormal"><a href="mailto:jamesanderson@coca-cola.com"><span style="color:blue">jamesanderson@coca-cola.com</span></a><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</td>
</tr>
</tbody>
</table>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<br>
<hr>
<font face="Arial" color="Gray" size="1"><br>
CONFIDENTIALITY NOTICE<br>
NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended
recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete
it from your system. Thank You.<br>
</font><br>
<hr>
<font face="Arial" color="Black" size="2"><br>
</font>
</body>
</html>