These docs are for v20.3.44. Click to read the latest docs for v20.3.186.

Discussions

Ask a Question
Back to All

SSO - refresh_token expiration

I'm implementing SSO for iMIS-Wordpress based on this tutorial https://www.organizedbits.com/blog/using-asis-single-sign-on-ipart.

What's mentioned in the tutorial is all great except the refresh_token lifetime. For my case, I set it to 45m but my refresh_tokens don't expire after 45m (now it's been 6h already).

I also configured the iMIS content to be available only for authenticated user, which means user need to login on iMIS then they will be redirected to my website. How can I sync the state of being-logged-in for user on iMIS and on my website? I should set the life time for both to 45m?

Thanks!