How to change sign-in token lifetime - users have to sign-in every session

Z-Bas 1 Reputation point
2022-07-19T17:07:11.18+00:00

I'm in IT for my company and I'm trying to create a system that uses the Microsoft365 API to generate new accounts for new hires. The issue is that the accounts created in this manner have sign-in token lifetimes that are too short, thereby requiring them to sign-in every day or every session.

For reference, I am using this call and I understand that users created this way have a default access token lifetime of 12 hours. However, I would like to understand how I can increase this value, as having to sign-in every day is inconvenient for our employees.

I am reading conflicting information of the mutability of this value from the linked material. Thank you in advance for any help.

Microsoft Authenticator
Microsoft Authenticator
A Microsoft app for iOS and Android devices that enables authentication with two-factor verification, phone sign-in, and code generation.
6,532 questions
Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,767 questions
Windows 365 Business
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Shivam Dhiman 6,046 Reputation points
    2022-07-20T18:08:55.213+00:00

    Hi @Z-Bas

    Hope you are doing well.
    TokenLifetimePolicy can help you in this scenario. As per this table the maximum value AccessTokenLifetime is 1day.
    222709-table-3.png

    Please refer to the above documentation for more details.

    You can also refer to refresh token. The default lifetime for the refresh tokens is 24 hours for single page apps and 90 days for all other scenarios.

    Please go through these relevant documentation also.
    Configurable token lifetimes in the Microsoft identity platform (preview)
    Configure token lifetime policies (preview)

    Hope this helps.

    If the answer is helpful, please click Accept Answer and kindly upvote. If you have any further questions about this answer, please click Comment.

    1 person found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.