It is possible to override the SSO Session Settings at the Client level.
Is it also possible to override them at USer level, so individual users can decide their own session expiry time.
The user does not decide the session expiration. Session lifetime is not within the user’s domain to control.
1 Like
Ok so there are no properties on the user record that could support such a feature and it isn’t likely to be added in the future?
In my experience, I haven’t seen any IdP that supports that feature (Keycloak, OpenAM, Gluu, Entra, ForgeRock, Ping, Auth0, etc). Setting the expiration is done at the global or client level, not at the user level.
1 Like
To be even more precise: in Keycloak you only have 1 SSO (user) session with an expiration. At client level, only the related client session can expire differently. But for the expiration of the user session itself there is only a global value per realm!
This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.