I am using the universal login with an SPA set up - I am getting the following in my response after a success: #access_token=xxxx&scope=openid%20email&expires_in=7200&token_type=Bearer&state=MDQkAvqN1rlY0w1yCcn9XX1f88ypm5Y1&id_token=xxxx How do I control the expires_in value?

When you add the audience param to your token request you are associating with an API. Are you adding any audience to your request?