# Extend SSO session

**URL:** <https://community.auth0.com/t/extend-sso-session/6115>\
**Category:** Get Help\
**Tags:** website, sso, asp\
**Created:** [April 5, 2017, 2:10pm UTC](https://community.auth0.com/t/extend-sso-session/6115 "2017-04-05T14:10:49Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![mathijs.van.gool](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mathijs.van.gool/32/3269_2.png) [@mathijs.van.gool](https://community.auth0.com/u/mathijs.van.gool)\
**Post date:** [April 5, 2017, 2:10pm UTC](https://community.auth0.com/t/extend-sso-session/6115/1 "2017-04-05T14:10:49Z")

</div>

Hi,

For a little context, we have multiple websites deployed and each contains a link to login (signup disabled).  
It forwards the browser to Auth0 login page which has SSO enabled. So if the user signed-in on one portal, he automatically gets signed-in on the second.  
We would like to decrease the SSO lifetime to 1 hour. However if the user remains active on one website, we need to keep extending the SSO lifetime to remain 1 hour. This can either be done in [ASP.NET](http://ASP.NET) (server side) or preferably in JS (client side).

Is it possible to ask Auth0 with an API call, to extend the SSO token lifetime?

Thanks in advance,  
Mathijs

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [April 6, 2017, 8:34pm UTC](https://community.auth0.com/t/extend-sso-session/6115/2 "2017-04-06T20:34:28Z")

</div>

This is currently not possible, although the session has both an [absolute and idle timeout](https://auth0.com/docs/sso#length-of-sso-sessions), the idle timeout is not configurable at the moment.

---

<div class="post-metadata">

**Author:** ![mathijs.van.gool](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mathijs.van.gool/32/3269_2.png) [@mathijs.van.gool](https://community.auth0.com/u/mathijs.van.gool)\
**Post date:** [April 7, 2017, 3:16pm UTC](https://community.auth0.com/t/extend-sso-session/6115/3 "2017-04-07T15:16:20Z")

</div>

“No” is also an answer.  
There is indeed an option to change the absolute timeout to any value. Let’s see if that’s sufficient 🙂

Thanks!

---

<div class="post-metadata">

**Author:** ![mathijs.van.gool](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/mathijs.van.gool/32/3269_2.png) [@mathijs.van.gool](https://community.auth0.com/u/mathijs.van.gool)\
**Post date:** [April 7, 2017, 3:16pm UTC](https://community.auth0.com/t/extend-sso-session/6115/4 "2017-04-07T15:16:20Z")

</div>

“No” is also an answer.  
There is indeed an option to change the absolute timeout to any value. Let’s see if that’s sufficient 🙂

Thanks!

---

<div class="post-metadata">

**Author:** ![rob.cooper](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rob.cooper/32/7842_2.png) [@rob.cooper](https://community.auth0.com/u/rob.cooper)\
**Post date:** [July 31, 2017, 10:33pm UTC](https://community.auth0.com/t/extend-sso-session/6115/5 "2017-07-31T22:33:01Z")

</div>

We’re also very interested in being able to do this (standard feature as part of [ASP.NET](http://ASP.NET) Sessions, and IdentityServer also supports it).

**Are there any plans to get this on the/a roadmap?**

**Failing that, is there any way we can _emulate_ it?**

---

<div class="post-metadata">

**Author:** ![rob.cooper](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/rob.cooper/32/7842_2.png) [@rob.cooper](https://community.auth0.com/u/rob.cooper)\
**Post date:** [July 31, 2017, 10:33pm UTC](https://community.auth0.com/t/extend-sso-session/6115/6 "2017-07-31T22:33:01Z")

</div>

We’re also very interested in being able to do this (standard feature as part of [ASP.NET](http://ASP.NET) Sessions, and IdentityServer also supports it).

**Are there any plans to get this on the/a roadmap?**

**Failing that, is there any way we can _emulate_ it?**

---

<div class="post-metadata">

**Author:** ![jmangelo](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/jmangelo/32/7923_2.png) [@jmangelo](https://community.auth0.com/u/jmangelo)\
**Post date:** [August 2, 2017, 6:12pm UTC](https://community.auth0.com/t/extend-sso-session/6115/7 "2017-08-02T18:12:36Z")

</div>

This is something that has been discussed and the outcome was that this should indeed be available, but I don’t have any available information to share about possible timelines. With regards to emulating it, maybe in some specific circumstances and would likely involve the client application calling into the logout endpoint as means to terminate the session if it judges the user to have been inactive. The issue would be how to judge inactivity if you have multiple independent client applications.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [March 2, 2018, 5:53am UTC](https://community.auth0.com/t/extend-sso-session/6115/8 "2018-03-02T05:53:06Z")

</div>


