<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00007MnU5ICAVOkta Classic EngineSingle Sign-OnAnswered2024-04-16T13:58:44.000Z2022-01-06T05:51:16.000Z2022-01-06T21:38:58.000Z

m1b9h (m1b9h) asked a question.

Re-authentication

If time out session are set to 4 hours, when user have reach 4 hours does Okta automatically re-authenticate the user if they are active or does Okta prompt the user to re-authenticate in the middle of their activity? I would like to lower the session timeout time however i do not want to disrupt workers with constant re-authentication notification. How can I accomplish this task?


  • Hello @m1b9h (m1b9h)​ ,

     

    Thanks for posting.

     

    You can manage the session lifetime. The maximum time the session can be set is currently 90 days. 

    1. Go to Security > Authentication > Sign on > "edit your desired policy"
    2. Depending on the selected option you will be able to set up the following
    • Per device
      • Remember device by default
        • Session lifetime
    • Every time
      • Session lifetime
    • Per session
      • Factor lifetime
        • Session lifetime
    1. Select Per session option (suggested only for known network zones for example office ip)
    • Factor lifetime -> used for the time between MFA prompts
      • Session lifetime -> used for the time a session will keep staying active

     

    All information available here:

    https://support.okta.com/help/s/article/Okta-Sign-on-policy-Factor-and-Session-Lifetime?language=en_US

     

     

    Now, as you mentioned, if you reduce the session to less than 4 hours, every time the session expires, the users will need to re-authenticate, but Okta does not log you out of your applications even though you might be logged out of your Okta session. 

    Okta does not control application sessions. The Okta session and the application session are mutually exclusive.

    Once Okta has authenticated a user into the application, Okta's part in the transaction is over, so there is no method by which Okta can control the session from our end.

     

    If the application session expires, it will require the user to re-authenticate with Okta.

    If there is already an active Okta session when the app session expires, then simply re-establish a connection to the app, either through the Okta dashboard (IdP initiated) or directly through the app's sign on page (SP initiated).

     

    https://support.okta.com/help/s/article/Why-does-Okta-session-expire-but-some-of-the-apps-are-still-open?language=en_US

     

    Let us know if this helps you.

     

     

    Daniela Chavarria.

    Okta Inc.

     

    Expand Post
This question is closed.
Loading
Re-authentication