Update SSO session validity from 5 to 15 min by default (#41456)

<!-- Add the related story/sub-task/bug number, like Resolves #123, or
remove if NA -->
**Related issue:** Resolves #39968

# Checklist for submitter

If some of the following don't apply, delete the relevant line.

- [x] Changes file added for user-visible changes in `changes/`,
`orbit/changes/` or `ee/fleetd-chrome/changes`.
See [Changes
files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files)
for more information.
This commit is contained in:
Marko Lisica 2026-03-20 10:56:54 +01:00 committed by GitHub
parent e53b9f024c
commit dab138bfbf
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 2 additions and 1 deletions

View file

@ -0,0 +1 @@
Increased the default SSO session validity period from 5 to 15 minutes.

View file

@ -1239,7 +1239,7 @@ func (man Manager) addConfigs() {
"Bcrypt iterations")
man.addConfigInt("auth.salt_key_size", 24,
"Size of salt for passwords")
man.addConfigDuration("auth.sso_session_validity_period", 5*time.Minute,
man.addConfigDuration("auth.sso_session_validity_period", 15*time.Minute,
"Timeout from SSO start to SSO callback")
man.addConfigBool("auth.require_http_message_signature", false,
"Require HTTP message signatures for fleetd requests (Premium feature)")