You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As we work to harden our resources, one thing we've been investigating is token lifetime. We found that when we request a token using MSAL's acquire_token_for_client, we get back a token with a lifetime of one day. We'd really like to trim this back to 1-2 hours, but there seems to be no option to do so in MSAL/ConfidentialClientApplication.
Is there a plan to address this in the future, or is token lifetime managed some other way?
Activity
rayluo commentedon Dec 11, 2024
Token lifetime is typically controlled by policy, not by how you call an sdk.
https://learn.microsoft.com/en-us/entra/identity-platform/configurable-token-lifetimes