<iframe src="https://www.googletagmanager.com/ns.html?id=GTM-M74D8PB" height="0" width="0" style="display:none;visibility:hidden">
Loading
Skip to NavigationSkip to Main Content
0D54z00009MAxllCADOkta Classic EngineSingle Sign-OnAnswered2026-02-21T09:00:25.000Z2023-06-26T14:53:14.000Z2023-06-30T23:35:12.000Z

4g9uk (4g9uk) asked a question.

Salesforce Logins Through Okta ~ Short Session Duration

Hi community, we're having trouble tracking down an issue where Salesforce logins via Okta have a very limited session duration (~2hrs). I've researched this issue and it seems like all of the session length settings are configurable only on the Salesforce side, and I'm not a Salesforce administrator; our SF admin is saying things should be right on his side, but I'm not sure.

 

I've looked on the Okta side on our tenant I don't see anything specific to this application w/r/t session timeout. Am I missing something? TIA


  • NiallM.34104 (Atlas Identity)

    Hi Joseph. You're correct, Okta does not dictate the Salesforce session lifetime. Deep in the bowels of SAML standards there are some elements where the IdP can assert what the session lifetime should be, but no-one pays any attention to that.

     

    Just to be clear, the Okta session for your users is constant, but you're seeing the Salesforce session timeout after two hours ? From memory, that's the default inactivity timeout at Salesforce.

    Expand Post
    Selected as Best
  • NiallM.34104 (Atlas Identity)

    Hi Joseph. You're correct, Okta does not dictate the Salesforce session lifetime. Deep in the bowels of SAML standards there are some elements where the IdP can assert what the session lifetime should be, but no-one pays any attention to that.

     

    Just to be clear, the Okta session for your users is constant, but you're seeing the Salesforce session timeout after two hours ? From memory, that's the default inactivity timeout at Salesforce.

    Expand Post
    Selected as Best
  • 4g9uk (4g9uk)

    Hi Niall, yeah - that makes sense. Thanks for your reply/sanity check. I have good experience on Okta but the SF side is new to me, I'll follow up internally. There are a few apps (including AWS) where we can and do control session timeout using Okta, but it's not common. Thanks again.

This question is closed.
Loading
Salesforce Logins Through Okta ~ Short Session Duration