<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D51Y00005lGBR2SAOOkta Classic EngineAdministrationAnswered2024-04-15T12:08:05.000Z2018-12-05T15:33:11.000Z2018-12-10T19:04:06.000Z
  • Mihai N. (Okta, Inc.)

    Hi Dillon, 

     

    Thank you for reaching out to the Okta Community. 

    The id_token is hard-coded to 1 hour. 

    https://developer.okta.com/docs/api/resources/oidc

     

    For ease of access:

    " Expiration happens at different times:

    •ID token expires after one hour.

    •Access token expiration is configured in a policy but is always between five minutes and one day.

    •Refresh Token expiration depends on two factors: 1) Expiration is configured in an Access Policy, no limits, but must be greater than or equal to the access token lifetime, and 2) Revocation if the Refresh Token isn’t exercised within a specified time. Configure the specified time in an Access Policy, with a minimum of ten minutes. "

                   

    For additional details please leverage the developer.okta.com site and the Developer Forum( https://devforum.okta.com/ ) . 

     

    Regards,

    Mihai Negoita

    Okta Global Customer Care

    Expand Post
This question is closed.
Loading
Is it possible to set the id_token lifetime length?