<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
I am also curious to hear others thoughts on this. In our
environment we decided to disable consistentAddress as well. The
reason was due to IPv6, dual homed computers, and how most OS's
these days auto generate new IPv6 addresses frequently. Another
issue was with laptops with docking stations that that are connected
and disconnected frequently. In all these cases users would change
ip addresses fairly often and needing to log in multiple times in an
afternoon was a bit much.<br>
<br>
Thanks,<br>
Dan Oachs<br>
<br>
<br>
<div class="moz-cite-prefix">On 04/25/2016 12:11 PM, Jeffrey
Crawford wrote:<br>
</div>
<blockquote
cite="mid:CANtXmG1HEKyph56Mu=OQB0MzzcR1691nbCfvtUE+q-zxMzcBpA@mail.gmail.com"
type="cite">
<meta http-equiv="Context-Type" content="text/html; charset=UTF-8">
<div dir="ltr">
<div class="gmail_default">We've been getting increasing
complaints, especially from mobile users that move between
4G/3G and wifi, that they are loosing their IdP SSO sessions.<br>
<br>
</div>
<div class="gmail_default">Therefore I've been asked to get some
concrete data about how much security consistentAddress adds
to the IdP sessions, or in other words how much security we
lose be disabling it.<br>
<br>
</div>
<div class="gmail_default">Thanks<br>
</div>
<div class="gmail_default"><br>
</div>
<div>
<div class="gmail_signature">
<div dir="ltr">Jeffrey
<div class="gmail_default">C.</div>
<div><br>
</div>
<div>Both pilots and IT professionals require training and
currency before charging into clouds!<br>
</div>
<div>---------------------------------------</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
</body>
</html>