CirrostratusAPM Inactivity Timeout
I have F5 setup as a saml sp and I have an external IDP. I have an inactivity timeout set to 2 hours, but I have users complaining that they are getting timeout errors from the F5 sometimes as early as 15 minutes after initial login. Is there any other setting that I need, and would inactivity timeout effectively set the session to 2 hours? And what happens if the user is active during that 2 hours? does it reset the timer?
...and it's been a while since I looked at this but for OWA would I need/want persistent cookies?
Well, I'm monitoring the session and sure enough the inactivity timer appears to be doing what it's supposed to do. It's set for 7200 seconds and I see it set to expire 7200 seconds after the user logs in. I also see it incrementing with their activity.
As for persistence I realized I don't want persistent cookies b/c then the cookies would be in memory and if the user closed their browser the session wouldn't end and that wouldn't work for my scenario in the event that they were using a public PC, hence the reason I don't have persistent cookies enabled.
