Hi @claus,
The doc you linked is correct, the session lifetimes are as follows:
- Inactivity timeout : Timeframe after which a user’s session will expire if they haven’t interacted with the Authorization Server. Will be superseded by system limits if over 3 days for self-service plans or 100 days for enterprise plans.
- Require log in after : Timeframe after which a user will be required to log in again, regardless of their activity. Will be superseded by system limits if over 30 days for self-service plans or 365 days for enterprise plans.
Specifically: “Will be superseded by system limits”