Reauthentication

[wennhe...@gmail.com]

Is it possible for the SP to do regular checks with the IdP that the user session is still active?

[Tom Scavo]

On Thu, Aug 20, 2015 at 10:43 AM, <wennhe...@gmail.com> wrote:
> Is it possible for the SP to do regular checks with the IdP that the user
> session is still active?

That's exactly what AuthnRequest/[@IsPassive] is for.

Tom

[wennhe...@gmail.com]

Ahh, I am using the onelogin library on one of our other apps to sync and found I can send isPassive param though.

The problem with this is that the session id changes and another X hours are added to the timeout.

Is this normal?

        <saml:AuthnStatement AuthnInstant="2015-08-20T16:34:09Z"

                             SessionNotOnOrAfter="2015-08-21T00:39:49Z"

                             SessionIndex="_XXXXXXXXXXXXXXXXXXXXX"

                             >