I am using Angular App with MSAL which Authenticate user through Azure AD We are getting ID Token & Access Code in return. BUT after 1 hour the ID Token is expiring. Can I INCREASE the Timeout of ID Token at Client-side Or Server-side? Please advice.

Id token lifetime is by default 1 hour and you can use acquireTokenSilentAsync method to renew id tokens as long as AAD user session is active. If AAD session expires the token renewal will fail making you to have an interactive call for user sign-in. You can however configure user session and id token lifetime to make the user logged in by choosing "Keep me Signed-In" as documented here . You can also configure lifetime policy for id tokens as described here .

ID Token - Increase Timeout from Angular/MSAL

Accepted answer

saurabh sharma 76 Reputation points

2020-03-16T21:01:45.69+00:00

Id token lifetime is by default 1 hour and you can use acquireTokenSilentAsync method to renew id tokens as long as AAD user session is active. If AAD session expires the token renewal will fail making you to have an interactive call for user sign-in. You can however configure user session and id token lifetime to make the user logged in by choosing "Keep me Signed-In" as documented here. You can also configure lifetime policy for id tokens as described here.
Please sign in to rate this answer.
saurabh sharma 76 Reputation points

2020-03-18T23:37:21.847+00:00

@Kevin Azure Please let me know if you find above reply useful. If yes, do click on 'Mark as answer' link in above reply. This will help other community members facing similar query to refer to this solution. Thanks.

Kevin Azure 141 Reputation points

2020-03-19T14:04:23.8+00:00

Thank you Saurab.. Will check this!

Sydney 21 Reputation points

2020-04-17T11:04:40.81+00:00

If I want to keep the token active for my long running angular page like signage or like a daemon app (angular may not support a deamon style app) , can I refresh the page every 55 minutes or before its expiry? Still someone has to login after 90 days?
A rolling window of 90 days (https://learn.microsoft.com/answers/questions/18432/azure-ad-msal-id-token-timeout-acquiretokensilent.html)

Timer2;
callAPIIntervalInMinute: number = 55*60*1000;
this.timer2 = setInterval(() => {
this.getSignageData(); //The page will be refreshed every 55 minutes.
}
}, this.callAPIIntervalInMinute);
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

ID Token - Increase Timeout from Angular/MSAL

0 additional answers

Your answer