From dab138bfbf71487350c4f0bc3ae6f4e77a4f816d Mon Sep 17 00:00:00 2001 From: Marko Lisica <83164494+marko-lisica@users.noreply.github.com> Date: Fri, 20 Mar 2026 10:56:54 +0100 Subject: [PATCH] Update SSO session validity from 5 to 15 min by default (#41456) **Related issue:** Resolves #39968 # Checklist for submitter If some of the following don't apply, delete the relevant line. - [x] Changes file added for user-visible changes in `changes/`, `orbit/changes/` or `ee/fleetd-chrome/changes`. See [Changes files](https://github.com/fleetdm/fleet/blob/main/docs/Contributing/guides/committing-changes.md#changes-files) for more information. --- changes/39968-sso-validity-increase-default | 1 + server/config/config.go | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) create mode 100644 changes/39968-sso-validity-increase-default diff --git a/changes/39968-sso-validity-increase-default b/changes/39968-sso-validity-increase-default new file mode 100644 index 0000000000..7a1746dbc3 --- /dev/null +++ b/changes/39968-sso-validity-increase-default @@ -0,0 +1 @@ +Increased the default SSO session validity period from 5 to 15 minutes. diff --git a/server/config/config.go b/server/config/config.go index ea3e6ad0fa..2bccc8d68a 100644 --- a/server/config/config.go +++ b/server/config/config.go @@ -1239,7 +1239,7 @@ func (man Manager) addConfigs() { "Bcrypt iterations") man.addConfigInt("auth.salt_key_size", 24, "Size of salt for passwords") - man.addConfigDuration("auth.sso_session_validity_period", 5*time.Minute, + man.addConfigDuration("auth.sso_session_validity_period", 15*time.Minute, "Timeout from SSO start to SSO callback") man.addConfigBool("auth.require_http_message_signature", false, "Require HTTP message signatures for fleetd requests (Premium feature)")