In application settings, refresh token rotation and expiration are disabled.
I have configured “inactivity timeout” and “required login after” in Login Session Management under tenant advanced settings.
I have logged in from my project and did not do any activity as configured in tenant settings and then able to access the project but expectation is redirect to oauth login page.
This should be determined by the inactivity timeout and require login after settings. Can you please DM me the name of your tenant and application so I can take a look?
I’m excited to inform you about our next Ask Me Anything session in the Forum on Tuesday, July 30, with the Product Management team. If you have questions about upcoming features like FGA, Manage Sessions in Actions, or SCIM. Submit your questions now, and our esteemed product experts will provide written answers on July 30. Can’t wait to see you there! Learn more here!