I have a SharePoint farm that uses an AD FS server as a Trusted Identity Provider.
The AD FS TokenLifetime is set at 30 minutes
The LogonTokenCacheExpirationWindow is set to 1 minute.
it would make my sessions last 29 minutes.
the SecurityTokenServiceConfig is set to use a 4 hour cookie lifetime...so the FedAuth cookie looks like it should last 4 hours. However, my users are experiencing timeouts much more frequently.
Is the expiration of the session actually determined by SharePoint and not the cookie? Do I need to kick up the token lifetime in ADFS to let people's sessions last longer?