I want to understand what is id_token lifetime is for. Basically, I need to enforce the user to proceed to log in again after some time, but I need to set different times for each application. I tried for id_token expiry time, but it didn’t work. The user continues with the active session even aft…

Hi @dkotsuka , The id_token is primarily a cache of the user’s profile to provide better performance, so you don’t need to keep calling the /userinfo endpoint. It is not related to the user’s session, as a user with a valid Auth0 session can request new tokens as and when required. Unfortunately, …

Id token lifetime expiration doesn't end user session

Get Help

konrad.sopala June 25, 2021, 10:42am 3

Thanks for helping with this one Steve!

Topic		Replies	Views
Why does changing ID token expiration to 1 second not log me out? Get Help	5	2342	January 7, 2021
User Session Active after Token Expired Knowledge Articles authentication-api , access-token , react , id-token	1	144	October 15, 2024
How to keep users logged in for longer? Get Help configuration , application	3	1126	August 23, 2023
roles and behaviors of idle session time, maximum session time, ID tokens, and how to properly configure them Get Help login-experience , new-universal-login-experience	2	173	December 24, 2024
Seemingly able to renew access_token with expired id_token Get Help id_token , access-token , expiration	7	6546	July 25, 2019

Id token lifetime expiration doesn't end user session

Related topics