title: How Spring SAML Works if assertion expires
body: <p>I have integrated <code>wso2 IS 5.11</code> with Spring SAML. After login the SAML response contains 5 minutes of assertion expiry. But if the same user uses the application for more than 5 minutes. There is no assertion refresh or logout happened. So, I am not getting how the assertion refresh should happen? How the session expiry should happen?. I wanted to implement a stateless SAML implementation using SAML token how to implement for session validation for each request?</p>