Single Sign-on (SSO) capabilities at the University of Hawaii are generally provided by either the Apereo Central Authentication Service (CAS) or Shibboleth Identity Provider (IdP).
...
Google Session Management Information
Circa summer 2018, Google has added a forced Shib re-authentication for G Suite. Every 24 hours G Suite will automatically check for a current Shib session, and will force a Shib re-authentication if no current Shib session is found.
Previously, Google allowed the caching of Shib sessions in the browser, so while a Shib session may have expired, Google didn't check, effectively allowing a user to continue using the Shib session until the browser dumped the cache and triggered a new Shib authentication.
| Note | ||
|---|---|---|
| ||
All these Shib, CAS, and web app sessions are pretty much independent and distinct: any session can exist with or without any other session, and the expiration of any one session does not imply the expiration of any other session. |
...