diff --git a/changes/39968-sso-validity-increase-default b/changes/39968-sso-validity-increase-default
new file mode 100644
index 0000000000..7a1746dbc3
--- /dev/null
+++ b/changes/39968-sso-validity-increase-default
@@ -0,0 +1 @@
+Increased the default SSO session validity period from 5 to 15 minutes.
diff --git a/server/config/config.go b/server/config/config.go
index ea3e6ad0fa..2bccc8d68a 100644
--- a/server/config/config.go
+++ b/server/config/config.go
@@ -1239,7 +1239,7 @@ func (man Manager) addConfigs() {
 		"Bcrypt iterations")
 	man.addConfigInt("auth.salt_key_size", 24,
 		"Size of salt for passwords")
-	man.addConfigDuration("auth.sso_session_validity_period", 5*time.Minute,
+	man.addConfigDuration("auth.sso_session_validity_period", 15*time.Minute,
 		"Timeout from SSO start to SSO callback")
 	man.addConfigBool("auth.require_http_message_signature", false,
 		"Require HTTP message signatures for fleetd requests (Premium feature)")