Problem statement
What is the maximum period of time that can safely be elapsed between redirect and /continue?
Solution
The maximum time that can be elapsed between the redirect and /continue is determined by the lifetime of the state parameter.
State lifetime is controlled via the Require log in after setting. This is in the Log In Session Management section under the Advanced tab in the tenant settings. The maximum lifetime is 3 days regardless of this setting value.