Why does changing ID token expiration to 1 second not log me out?

Get Help
1

My understanding is that ID token is ressponsible for authenticating the user. Surely then when it expires I’m supposed to be logged out of the app?

Why does changing the below setting not achieve this? Or is my understanding wrong?
image

2

Hi @ilmoi

It is either an access token or a session that determines if you are logged in, most likely a session.
See this page: Sessions

John

3

Yep ID tokens are used in token-based authentication to cache user profile information and provide it to a client application, thereby providing better performance and experience. The application receives an ID token after a user successfully authenticates, then consumes the ID token and extracts user information from it.

4

Makes sense. Thanks for guiding me.

For anyone looking to log out users fasters, the parameters to do so are under tenant settings:

5

Thanks for sharing that with the rest of community!