Hi @cal7o (cal7o)​ 

Okta will not control application session duration on the application side. The session duration for Okta is controlled under Security -> Authentication -> Sign On, and the default time is two hours.

You can use https://domain.okta.com/api/v1/sessions/me to get more information about the current Okta session.

Thank you,

Valentin Borcan

Thanks @valentin.borcan1.570013527049304E12 (Okta, Inc.)​ for the reply. Please provide your comments to the following. Thanks.

1. We are observing a default session timeout of 8 hours and not 2 hours. Can you double check to see if it is really 2 hours?
2. When you mentioned that the session duration for Okta is controlled under Security -> Authentication -> Sign On, can you let me know what field(s) control the session?
3. What is the difference between the setting "Disable Force Authentication" under Security -> Authentication -> Sign On and "Honor Force Authentication" under "Create App Integration -> Saml 2.0 -> Configure Saml (Advanced Settings).

Hi @valentin.borcan1.570013527049304E12 (Okta, Inc.)​ , any chance you could answer the above post? Quoting:

1. "What is the difference between the setting "Disable Force Authentication" under Security -> Authentication -> Sign On and "Honor Force Authentication" under "Create App Integration -> Saml 2.0 -> Configure Saml (Advanced Settings)."

Thank you.