<div dir="ltr"><div class="gmail_default" style="font-family:"trebuchet ms",sans-serif"><div><div class="gmail_default" style="display:inline">​</div>Hi,</div><div><br></div><div>I am having a query regarding this logout functionality in IdP.</div><div><br></div><div>1. I have a SP (non-shibboleth) and IdP(shibboleth).</div><div>2. In IDP, the following are the session lifetime configurations:</div><div>idp.session.enabled=true </div><div><div class="gmail-m_-8572399178023537712m_584036618377313706gmail-line gmail-m_-8572399178023537712m_584036618377313706gmail-number1 gmail-m_-8572399178023537712m_584036618377313706gmail-index0 gmail-m_-8572399178023537712m_584036618377313706gmail-alt2" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:consolas,"bitstream vera sans mono","courier new",courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><span style="background-color:initial;color:rgb(0,0,0)">idp.session.timeout=PT24H</span></div><div class="gmail-m_-8572399178023537712m_584036618377313706gmail-line gmail-m_-8572399178023537712m_584036618377313706gmail-number5 gmail-m_-8572399178023537712m_584036618377313706gmail-index4 gmail-m_-8572399178023537712m_584036618377313706gmail-alt2" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:consolas,"bitstream vera sans mono","courier new",courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-m_-8572399178023537712m_584036618377313706gmail-bash gmail-m_-8572399178023537712m_584036618377313706gmail-plain" style="font-family:consolas,"bitstream vera sans mono","courier new",courier,monospace;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;background-color:initial;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">idp.authn.defaultLifetime=PT24<wbr>H</code></div><div class="gmail-m_-8572399178023537712m_584036618377313706gmail-line gmail-m_-8572399178023537712m_584036618377313706gmail-number8 gmail-m_-8572399178023537712m_584036618377313706gmail-index7 gmail-m_-8572399178023537712m_584036618377313706gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:consolas,"bitstream vera sans mono","courier new",courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-m_-8572399178023537712m_584036618377313706gmail-bash gmail-m_-8572399178023537712m_584036618377313706gmail-plain" style="font-family:consolas,"bitstream vera sans mono","courier new",courier,monospace;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;background-color:initial;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)">idp.authn.defaultTimeout=PT60M</code></div><div class="gmail-m_-8572399178023537712m_584036618377313706gmail-line gmail-m_-8572399178023537712m_584036618377313706gmail-number8 gmail-m_-8572399178023537712m_584036618377313706gmail-index7 gmail-m_-8572399178023537712m_584036618377313706gmail-alt1" style="margin:0px;padding:0px 1em 0px 0px;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;border:0px;float:none;height:auto;line-height:20px;outline:0px;overflow:visible;vertical-align:baseline;width:auto;box-sizing:content-box;font-family:consolas,"bitstream vera sans mono","courier new",courier,monospace;font-size:14px;min-height:inherit;white-space:nowrap;color:rgb(51,51,51)"><code class="gmail-m_-8572399178023537712m_584036618377313706gmail-bash gmail-m_-8572399178023537712m_584036618377313706gmail-plain" style="font-family:consolas,"bitstream vera sans mono","courier new",courier,monospace;border-radius:0px;background-image:initial;background-position:0px 50%;background-size:initial;background-repeat:initial;background-origin:initial;background-clip:initial;background-color:initial;border:0px;float:none;height:auto;line-height:20px;margin:0px;outline:0px;overflow:visible;padding:0px;vertical-align:baseline;width:auto;box-sizing:content-box;min-height:inherit;color:rgb(0,0,0)"><br></code></div></div><div>3. Does IDP by default considers idp.session.enabled property as true even if it is not set? Because in the idp.properties, this property is commented out by default.</div><div><br></div><div>4. If I am working on SP and the IDP session can expire if the session timeout has reached. Since user is still working on the application, it will not be a good user experience to make him forcefully logout if IDP session has expired. How can i increase the IDP session at runtime, if SP is active. Is there any SAML request to do so?</div><div><br></div><div>Thanks and Regards,</div><div>Virajitha</div><div><br></div><span class="gmail-m_-8572399178023537712HOEnZb" style="font-family:arial,sans-serif"><font color="#888888"></font></span></div><div class="gmail_extra">
</div></div>