MFA token expiry?

[dan.woda]

Hi @thankfulpanda,

Welcome to the Community!

It looks like they should have a 10 minute expiry, according to the following post. Are you experiencing other behavior?

Default /mfa/ audience's token expiration time

Access tokens with AUTH0_DOMAIN/mfa audience are restricted to 10 minutes expiry due to security reasons. This cannot be bypassed. I would use that audience only when the MFA scopes are explicitly required, and use a different or no audience otherwise.