l0xhh (l0xhh) asked a question.
User session getting timeout frequently on customer application
Hello, I am currently working on diagnosing a problem intermittently reported by customer using our applications, forcing them to re-authenticate through the application. We leverage Okta for authentication and upon close look, we see the token reuse event being triggered intermittently in Okta for our customer auth servers.
app.oauth2.as.token.detect_reuse
Could this be the root cause? I am unable to join the timestamp of when user is getting timed out to this event. But, if this is indeed; how we can fix this problem?
Hi @l0xhh (l0xhh) , Thank you for reaching out to the Okta Community!
Typically, Okta does not govern the downstream application session lifetime.
Okta Authentication Policies help you configure the session lifetime for the user while on the *.okta.com domains and once a user is authenticated in the downstream app, it up to the app to determine how long this authentication is valid. Some apps have a set period, some allow for customization.
The Okta Community Questions forum isn't really meant for in-depth troubleshooting, so if you have an account with us, please open a case to work with our Support Team to investigate. They'll be able to access additional tools and resources to help you get to the bottom of it.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--
Help others in the community by liking or hitting Select as Best if this response helped you.