<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D50Z00008G7UuQSAVOkta Classic EngineIntegrationsAnswered2024-04-30T09:18:25.000Z2018-04-04T13:36:37.000Z2018-08-12T04:15:22.000Z
Manage token expiration with Sign-in Widget
Hello, 

 

I configured via Access Policies the Access token lifetime has a day, but when I connect via the widget signin, the token id and the access token stay at 1 hour. 

The token preview does give me a token with the expected expiration date, and a one-hour id_token. 

 

I don't understand why the token access returned by the API isn't a day old. You have to use the refresh token widget method? 

 

Thank you

  • Hi Mathias

     

    Thank you for posting your inquiry to Okta Support Community Portal.

     

      The Okta Sign-in Widget uses Okta as an authorization server and it's Access Policies can't be modified. You will need to use a custom authorization server for those changes to reflect on your Access Policies.

     

    https://developer.okta.com/use_cases/authentication/

     

    https://developer.okta.com/code/javascript/okta_sign-in_widget

     

    If you need further assistance, please feel free to open a case with Okta Support or send an email to developers@okta.com.

     

     

    Thank you,

    Daniel
    Expand Post
    Selected as Best
  • j5v7c (j5v7c)

    Hello Mathias,

     

    Thanks for posting your inquiry in Okta Community Portal.

     

    If you receive a great answer to your question(s), please help readers find it by marking it the best answer. Hover over the answer and click "Best Answer." 

     

    Thank you,

     

    Dylann Fezeu

    Okta Help Center Team
    Expand Post
This question is closed.
Loading
Manage token expiration with Sign-in Widget